Skip to content

Pr_security #585

Merged
aatmanvaidya merged 4 commits intotattle-made:developmentfrom
denma98:development
Apr 22, 2025
Merged

Pr_security #585
aatmanvaidya merged 4 commits intotattle-made:developmentfrom
denma98:development

Conversation

@denma98
Copy link
Copy Markdown
Contributor

@denma98 denma98 commented Apr 17, 2025

This solves issue #468

Changes Made

  1. Added pip-audit checks for all Python projects:

    • Finds all pyproject.toml files in the repository
    • Converts them to requirements.txt using uv pip compile.
    • Runs pip-audit on the generated requirements files
    • Fails the check if any vulnerabilities are found
  2. Added Deptry dependency checks:

    • Scans for unused or missing dependencies in Python projects
    • Provides detailed output about dependency issues
    • Fails the check if problems are found

@denma98
Copy link
Copy Markdown
Contributor Author

denma98 commented Apr 17, 2025

Its failing as we have many unused dependencies.
image

@aatmanvaidya aatmanvaidya self-requested a review April 18, 2025 10:59
@aatmanvaidya
Copy link
Copy Markdown
Collaborator

Its failing as we have many unused dependencies.

noted, looking into it

Comment thread pyproject.toml Outdated
@aatmanvaidya aatmanvaidya linked an issue Apr 22, 2025 that may be closed by this pull request
3 tasks
@aatmanvaidya aatmanvaidya merged commit 2f84d39 into tattle-made:development Apr 22, 2025
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix security checks on PR GitHub action

2 participants