diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index c3e5fd81..00000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,27 +0,0 @@ -version: 2 -updates: -- package-ecosystem: pip - directory: "/" - schedule: - interval: weekly - open-pull-requests-limit: 10 - ignore: - - dependency-name: pylint - versions: - - 2.6.2 - - 2.7.0 - - 2.7.1 - - 2.7.3 - - 2.7.4 - - 2.8.1 - - dependency-name: sphinx-autoapi - versions: - - 1.8.0 - - dependency-name: marshmallow - versions: - - 3.11.0 - - dependency-name: sphinx - versions: - - 3.5.0 - - 3.5.1 - - 3.5.2 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 2e68f9b5..683408fc 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -30,6 +30,15 @@ jobs: with: name: base-coverage.lcov path: ./base-coverage.lcov + + pip_audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + + - uses: pypa/gh-action-pip-audit@v1.1.0 + with: + inputs: dev-requirements.txt test: runs-on: ubuntu-latest