Skip to content

feat: list skipped commits in pull request #896

feat: list skipped commits in pull request

feat: list skipped commits in pull request #896

Workflow file for this run

name: Security
on:
push:
pull_request:
merge_group:
schedule:
- cron: '0 3 * * *'
jobs:
rust-audit:
runs-on: ubuntu-latest
# Keep version in sync with rust-toolchain.toml
container: rust:1.81.0
steps:
- uses: actions/checkout@v4
- name: Check Rust dependencies
run: |
make rust-audit
static-analysis-and-no-known-cves:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v5
with:
python-version: '3.8'
- name: Install dependencies
run: |
pip install safety semgrep
- name: Check Python dependencies for CVEs
run: |
make safety
- name: Run static security testing on source code with semgrep
run: |
make semgrep