diff --git a/.gitea/workflows/pip-audit.yml b/.gitea/workflows/pip-audit.yml index 6e04983..f4795d7 100644 --- a/.gitea/workflows/pip-audit.yml +++ b/.gitea/workflows/pip-audit.yml @@ -11,13 +11,28 @@ on: # XXX need to do stuff with uv jobs: build: - runs-on: freebsd + runs-on: ubuntu-latest strategy: matrix: - python-version: ["3.11"] + python-version: + - "3.11" steps: - - uses: actions/checkout@v4 + - name: Checkout code + uses: actions/checkout@v4 + + - name: Set up Python ${{ matrix.python-version }} + uses: actions/setup-python@v4 + with: + python-version: '${{ matrix.python-version }}' + cache: 'pip' + cache-dependency-path: 'requirements.txt' + + - name: Install dependencies + run: | + python -m pip install --upgrade pip + python -m pip install --upgrade pip-audit + pip install -r requirements.txt + - name: Check vulnerable components with pip-audit run: | pip-audit -r requirements.txt -