diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 062ac49..b09fb68 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -1,13 +1,19 @@ name: Example workflow for Python using Snyk -on: pull_request +on: push jobs: security: runs-on: ubuntu-latest steps: - uses: actions/checkout@master + - name: Install python + uses: actions/setup-python@v5 + with: + # Semantic version range syntax or exact version of a Python version + python-version: '3.8' - name: Run Snyk to check for vulnerabilities uses: snyk/actions/python@master env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: args: --file=Pipfile + command: test diff --git a/Pipfile2 b/Pipfile2 new file mode 100644 index 0000000..4e1f835 --- /dev/null +++ b/Pipfile2 @@ -0,0 +1,14 @@ +[[source]] +name = "pypi" +url = "https://pypi.org/simple" +verify_ssl = true + +[dev-packages] + +[packages] +flask = "==0.12.1" +numpy = "*" +requests = {editable = true,git = "https://github.com/requests/requests.git"} + +[requires] +python_version = "3.7"