Update structure and workflows

clintaire · Sep 19, 2024 · 4e219c3 · 4e219c3
1 parent 20daf5d
commit 4e219c3
Show file tree

Hide file tree

Showing 2 changed files with 57 additions and 14 deletions.
diff --git a/.github/workflows/python-checkers.yaml b/.github/workflows/python-checkers.yaml
@@ -4,32 +4,34 @@ on:
   push:
     branches:
       - main
+      - PyGC
   pull_request:
     branches:
       - main
+      - PyGC
 
 jobs:
   test:
     runs-on: ubuntu-latest
 
     strategy:
       matrix:
-        python-version: [3.8, 3.9, 3.10, 3.11]
+        python-version: ["3.8", "3.9", "3.10", "3.11"]
 
     steps:
-    - name: Checkout code
-      uses: actions/checkout@v3
+      - name: Checkout code
+        uses: actions/checkout@v3
 
-    - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
-      with:
-        python-version: ${{ matrix.python-version }}
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
 
-    - name: Install dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install pytest
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install pytest
 
-    - name: Run tests
-      run: |
-        PYTHONPATH=. pytest tests/
+      - name: Run tests
+        run: |
+          PYTHONPATH=. pytest tests/
diff --git a/.github/workflows/security-checks.yaml b/.github/workflows/security-checks.yaml
@@ -0,0 +1,41 @@
+name: Security Checks
+
+on:
+  push:
+    branches:
+      - main
+      - PyGC
+  pull_request:
+    branches:
+      - main
+      - PyGC
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+
+    strategy:
+      matrix:
+        python-version: ["3.8", "3.9", "3.10", "3.11"]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install Bandit and Safety
+        run: |
+          python -m pip install --upgrade pip
+          pip install bandit safety
+
+      - name: Run Bandit for security linting
+        run: |
+          bandit -r bot/
+
+      - name: Check for vulnerable dependencies with Safety
+        run: |
+          safety check --full-report