inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2025-06-15 19:45:46 +00:00
Code Activity

Add zimor to checks

Browse Source
This commit is contained in:
Matthias Mair
2024-12-09 08:06:52 +01:00
parent 1a8b030819
commit c2db21dd2d
1 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
.github/workflows/qc_checks.yaml vendored
View File

@ -36,6 +36,7 @@ jobs:
frontend: ${{ steps.filter.outputs.frontend }} frontend: ${{ steps.filter.outputs.frontend }}
api: ${{ steps.filter.outputs.api }} api: ${{ steps.filter.outputs.api }}
force: ${{ steps.force.outputs.force }} force: ${{ steps.force.outputs.force }}
cicd: ${{ steps.filter.outputs.cicd }}
steps: steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2 - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2
@ -56,6 +57,8 @@ jobs:
- 'src/backend/InvenTree/InvenTree/api_version.py' - 'src/backend/InvenTree/InvenTree/api_version.py'
frontend: frontend:
- 'src/frontend/**' - 'src/frontend/**'
cicd:
- '.github/workflows/**'
- name: Is CI being forced? - name: Is CI being forced?
run: echo "force=true" >> $GITHUB_OUTPUT run: echo "force=true" >> $GITHUB_OUTPUT
id: force id: force
@ -585,3 +588,26 @@ jobs:
name: frontend-build name: frontend-build
path: src/backend/InvenTree/web/static/web path: src/backend/InvenTree/web/static/web
include-hidden-files: true include-hidden-files: true
zizmor:
name: Security [Zizmor]
need: ['pre-commit']
runs-on: ubuntu-20.04
needs: paths-filter
if: needs.paths-filter.outputs.cicd == 'true' || needs.paths-filter.outputs.force == 'true'
permissions:
security-events: write
steps:
- name: Checkout repository
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2
with:
persist-credentials: false
- uses: hynek/setup-cached-uv@v2
- name: Run zizmor
run: uvx zizmor --format sarif . > results.sarif
- name: Upload SARIF file
uses: github/codeql-action/upload-sarif@v3
with:
sarif_file: results.sarif
category: zizmor