Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

make files more readable, update actions/checkout to v4 and setup-python to v5 and add bandit scan #62

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

Killpit
Copy link

@Killpit Killpit commented Aug 27, 2024

Changes made

-Changed actions/checkout from v3 to v4 to make sure the environment is kept on date
-Changed actions/setup-python from v4 to v5 to make sure the environment is kept on date
-Gave one more line each to make sure the pipeline lines on CI are more readable

Additions

-Added Bandit for GitHub Actions to find common security issues in Python code before it finds production, currently learning the tool and will try to figure out how I can fail if certain levels of security vulnerabilities (ie. high) are found.

Future plans

-Adding Safety for vulnerability scanning in packages, however, depending on the plan used, it can go up to $30 per month per developer
-Encompassing Bandit scan to stop the ci as soon as a certain level and certain confidence for vulnerability is found (such as high vulnerability high confidence).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant