fix: docker/Dockerfile to reduce vulnerabilities #40
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Build and Test | |
on: [ push ] | |
jobs: | |
build: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v3 | |
- uses: actions/setup-python@v4 | |
with: | |
python-version: '3.11' | |
cache: 'pipenv' # caching pipenv dependencies | |
- name: Install pipenv and pipx | |
run: | | |
pip install pipenv && pip install pipx | |
- name: Install global dependencies | |
run: | | |
pipx install isort && pipx install black && pipx install bandit && pipx install pylint && \ | |
pipx install pre-commit && pipx install pygount && pipx install vulture && \ | |
pipx install flake8 && \ | |
pipx inject flake8 dlint mccabe pyflakes pep8-naming flake8-bugbear && \ | |
pipx install "pipenv-to-requirements==0.9.*" && \ | |
pipx inject pipenv-to-requirements "pipenv==2022.9.8" && \ | |
pipx install safety && \ | |
pipx install poetry | |
- name: Install Dependencies | |
run: pipenv install --dev --skip-lock | |
- name: Run nb | |
run: pipenv run nb package | |
- name: Upload Package | |
uses: actions/[email protected] | |
with: | |
name: packages | |
path: dist/ | |
if-no-files-found: error | |
retention-days: 1 | |
pypi-publish: | |
name: Upload release to PyPI | |
runs-on: ubuntu-latest | |
environment: | |
name: pypi | |
url: https://pypi.org/p/markpickle | |
permissions: | |
id-token: write # IMPORTANT: this permission is mandatory for trusted publishing | |
# if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') | |
steps: | |
- name: Get packages | |
uses: actions/[email protected] | |
with: | |
name: packages | |
path: dist/ | |
- name: Publish package distributions to PyPI | |
uses: pypa/gh-action-pypi-publish@release/v1 | |
needs: build |