archinstall/.github/workflows/guarddog.yaml

20 lines
816 B
YAML

on: [ push, pull_request ]
name: guarddog security checkup
jobs:
guarddog:
runs-on: ubuntu-latest
container:
image: archlinux:latest
steps:
- uses: actions/checkout@v3
- run: pacman --noconfirm -Syu git python python-setuptools python-pip python-build python-poetry
- run: python -m pip install --upgrade pip
- run: pip install git+https://github.com/DataDog/guarddog.git
- run: python --version
- name: run build
run: python -m build
- name: run guarddog on archinstall
run: guarddog scan dist/*.tar.gz --exit-non-zero-on-finding
- name: run guarddog on dependencies
run: xargs guarddog scan --exit-non-zero-on-finding <requirements.txt