Added SAST in CI/CD

Chelsea486MHz · May 12, 2024 · 1bab77b · 1bab77b
1 parent 8a85a13
commit 1bab77b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
@@ -15,10 +15,13 @@ jobs:
           python-version: 3.12
           architecture: x64
 
+      - name: Static security analysis
+        run: bandit -c pyproject.toml -r src
+
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install setuptools wheel build
+          pip install setuptools wheel build bandit flake8
 
       - name: Build package
         run: python -m build
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,3 +1,7 @@
 [build-system]
 requires = ["setuptools"]
-build-backend = "setuptools.build_meta"
+build-backend = "setuptools.build_meta"
+
+[tool.bandit]
+exclude_dirs = ["tests"]
+skips = ["B110", "B404", "B602"]