forked from JPEWdev/shacl2code
-
Notifications
You must be signed in to change notification settings - Fork 0
30 lines (27 loc) · 735 Bytes
/
Copy pathbandit.yaml
File metadata and controls
30 lines (27 loc) · 735 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
---
name: Bandit
on:
push:
# Only run when shacl2code's own Python source could be affected
paths: &trigger-paths
- "src/shacl2code/**"
- "pyproject.toml"
- ".github/workflows/bandit.yaml"
pull_request:
paths: *trigger-paths
permissions:
contents: read
jobs:
bandit:
runs-on: ubuntu-latest
permissions:
# Needed to upload results to the code scanning dashboard
security-events: write
actions: read
contents: read
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Run Bandit
uses: PyCQA/bandit-action@67a458d90fa11fb1463e91e7f4c8f068b5863c7f # v1.0.1
with:
targets: src/shacl2code