Skip to content

chore(deps)(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the github-actions group #962

chore(deps)(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the github-actions group

chore(deps)(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the github-actions group #962

Workflow file for this run

name: (RHIZA) VALIDATE
permissions:
contents: read
on:
push:
branches: [ main, master ]
pull_request:
branches: [ main, master ]
#schedule:
# - cron: "0 9 * * 1" # Every Monday at 09:00 UTC
#workflow_dispatch:
env:
UV_EXTRA_INDEX_URL: ${{ secrets.UV_EXTRA_INDEX_URL }}
jobs:
validate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6.0.2
with:
lfs: true
- uses: astral-sh/setup-uv@v7.6.0
with:
version: "0.10.12"
#- uses: ./.github/actions/configure-git-auth
# with:
# token: ${{ secrets.GH_PAT }}
- run: make validate
- run: make typecheck
- run: make security
- run: make semgrep
#- run: make license
licenses:
name: License compliance scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6.0.2
- uses: astral-sh/setup-uv@v7.6.0
with:
version: "0.10.12"
#- uses: ./.github/actions/configure-git-auth
# with:
# token: ${{ secrets.GH_PAT }}
- run: make license
- uses: actions/upload-artifact@v4
if: always()
with:
name: licenses
path: LICENSES.md
pip-audit:
name: Dependency vulnerability scan
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6.0.2
- uses: astral-sh/setup-uv@v7.6.0
with:
version: "0.10.12"
- run: uvx pip-audit