public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-09-30 03:01:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

Changed pipeline

Browse Source
This commit is contained in:
maziggy
2026-03-26 13:52:52 +01:00
parent 27bf1a4e28
commit ac75d4957f
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/security.yml
+4 -2
View File
@@ -130,8 +130,10 @@ jobs:
- name: Run pip-audit
id: pip-audit
run: |
pip-audit --desc on --format json --output pip-audit-results.json || echo "vulnerabilities_found=true" >> $GITHUB_OUTPUT
pip-audit --desc on || true
# CVE-2026-4539: low-severity ReDoS in Pygments AdlLexer (indirect dep via mkdocs-material/pytest/rich).
# No fix available yet. Remove --ignore-vuln once Pygments releases a patched version.
pip-audit --desc on --format json --output pip-audit-results.json --ignore-vuln CVE-2026-4539 || echo "vulnerabilities_found=true" >> $GITHUB_OUTPUT
pip-audit --desc on --ignore-vuln CVE-2026-4539 || true
- name: Upload audit results
if: always()