build(POETRY): more accurate security test

osx-provisioner · Jul 3, 2022 · 49e05c5 · 49e05c5
1 parent 21b42f3
commit 49e05c5
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/self-test.yml b/.github/workflows/self-test.yml
@@ -355,7 +355,7 @@ jobs:
           pip install --upgrade pip safety
           cd "${TEMPLATED_NAME}"
             poetry install
-            safety check
+            poetry export -f requirements.txt --without-hashes | safety check --stdin
           cd ..
 
       - name: Security Test Template -- Report Job Status on Success

diff --git a/{{cookiecutter.profile_slug}}/.github/workflows/push.yml b/{{cookiecutter.profile_slug}}/.github/workflows/push.yml
@@ -224,7 +224,7 @@ jobs:
           pip install safety poetry
           pip install --upgrade pip
           poetry install
-          safety check
+          poetry export -f requirements.txt --without-hashes | safety check --stdin
 
       - name: Security Test -- Report Job Status on Success
         if: ${{ env.VERBOSE_NOTIFICATIONS  == '1' }}

diff --git a/{{cookiecutter.profile_slug}}/pyproject.toml b/{{cookiecutter.profile_slug}}/pyproject.toml
@@ -12,10 +12,10 @@
     version = "0.0.1"
 
     [tool.poetry.dependencies]
-      ansible = "^5.2.0"
       python = ">=3.8.0,<4.0"
 
     [tool.poetry.dev-dependencies]
+      ansible = "^5.2.0"
       ansible-compat = "!=2.1.0"
       ansible-lint = "^5.3.2"
       commitizen = "^2.20.4"