Skip to content

Commit ef8c3c1

Browse files
chore: bump dependencies and add SCA scan workflow
1 parent 026b0df commit ef8c3c1

4 files changed

Lines changed: 61 additions & 289 deletions

File tree

.github/workflows/sca_scan.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
name: SCA
2+
3+
on:
4+
push:
5+
branches: ["master", "main"]
6+
7+
jobs:
8+
snyk-cli:
9+
uses: auth0/devsecops-tooling/.github/workflows/sca-scan.yml@main
10+
with:
11+
additional-arguments: "--exclude=README.md,.jfrog --skip-unresolved"
12+
python-version: "3.10"
13+
pre-scan-commands: |
14+
python3 -m venv venv --upgrade-deps
15+
./venv/bin/pip3 install -r requirements.txt
16+
secrets: inherit

.gitignore

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,4 +23,7 @@ setup.py
2323
test.py
2424
test-script.py
2525
.coverage
26-
coverage.xml
26+
coverage.xml
27+
28+
# AI tools
29+
.claude

0 commit comments

Comments
 (0)