Skip to content
CI

Update bandit from 1.6.2 to 1.7.10 #2641

Sign in to view logs

Update bandit from 1.6.2 to 1.7.10

Update bandit from 1.6.2 to 1.7.10 #2641

Workflow file for this run

.github/workflows/test_ci.yml at 595f317
name: CI
on: [push, pull_request]
jobs:
sast_satage:
if: github.event_name == 'push'
name: SAST
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v1
- name: Set up Python 3.7
uses: actions/setup-python@v1
with:
python-version: 3.7
- name: Install development dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements-dev.txt
- name: Run Static Application Security Testing
run: bandit -r app/
unittest:
if: github.event_name == 'push'
name: Run Unit Testing
runs-on: ubuntu-latest
needs: sast_satage
steps:
- name: test
run: echo " ${{ github.event_name }} "
- name: Checkout
uses: actions/checkout@v1
- name: Set up Python 3.7
uses: actions/setup-python@v1
with:
python-version: 3.7
- name: Install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt
- name: Run unit test
run: python test_my_api.py
build:
if: github.event_name == 'pull_request'
name: Build Image
runs-on: ubuntu-latest
# needs: unittest
steps:
- name: Checkout
uses: actions/checkout@v1
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v1
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ secrets.AWS_ECR_REGION }}
- name: Login to Amazon ECR
id: login-ecr
uses: aws-actions/amazon-ecr-login@v1
- name: Build, tag, and push image to Amazon ECR
id: build-image
env:
ECR_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
ECR_REPOSITORY: ${{ secrets.AWS_ECR_REPOSITORY }}
IMAGE_TAG: ${{ github.sha }}
run: |
# Build a docker container and
# push it to ECR so that it can
# be deployed to ECS.
echo "Imge to build: $IMAGE_TAG"
docker build -t $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG .
echo "ECR REGISTRY: $ECR_REGISTRY"
docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
echo "::set-output name=image::$ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG"