Revert "Add a workflow for scanning python deps" (#13959)

This commit is contained in:
William Allen 2022-11-18 18:05:51 -06:00 committed by GitHub
parent 789acbe74f
commit 7b3502d66d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,62 +0,0 @@
name: 🚨 Snyk Python Scan
on:
push:
branches:
- long_lived/**
- main
- release/**
tags:
- '**'
pull_request:
branches:
- '**'
workflow_dispatch: null
concurrency:
# SHA is added to the end if on `main` to let all main workflows run
group: ${{ github.ref }}-${{ github.workflow }}-${{ github.event_name }}-${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/') || startsWith(github.ref, 'refs/heads/long_lived/')) && github.sha || '' }}
cancel-in-progress: true
permissions:
contents: read
jobs:
snyk_python:
name: Setup runner
runs-on: ubuntu-latest
strategy:
matrix:
python-version: [3.9]
steps:
- name: Checkout Code
uses: actions/checkout@v3
with:
fetch-depth: 0
- name: Setup Python environment
uses: actions/setup-python@v3
with:
python-version: ${{ matrix.python-version }}
- name: Install Chia Blockchain
uses: ./.github/actions/install
with:
python-version: ${{ matrix.python-version }}
development: true
- name: Activate Chia venv
uses: chia-network/actions/activate-venv@main
- name: Generate requirements.txt file
run: |
pip freeze > requirements.txt
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/python@master
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
with:
command: monitor
args: --skip-unresolved