From fc0c8e3331acef950de26550dc1a89df2b030f78 Mon Sep 17 00:00:00 2001 From: Olivier DEBAUCHE Date: Tue, 25 Jun 2024 19:54:50 +0200 Subject: [PATCH] Update security.yml --- .github/workflows/security.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 09ddf602..3de9b6e7 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -68,6 +68,24 @@ jobs: with: sarif_file: results.sarif + security: + runs-on: ubuntu-latest + steps: + - name: Check out master + uses: actions/checkout@v4 + + - uses: actions/setup-python@v5 + with: + python-version: 3.12 + + - name: install + run: | + python -m pip install -r requirements.txt + + - uses: pypa/gh-action-pip-audit@v1.0.8 + with: + vulnerability-service: osv + trufflehog: name: Secret Leaks runs-on: ubuntu-latest