chg: dev: update bandit workflow, add config to pyproject.toml

Signed-off-by: Stephen L Arnold <[email protected]>
VCTLabs · Oct 2, 2023 · 4436aaa · 4436aaa
1 parent af465d5
commit 4436aaa
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
@@ -2,11 +2,7 @@ name: Security check - Bandit
 
 on:
   workflow_dispatch:
-  pull_request:
   push:
-    branches:
-      - master
-      - develop
 
 jobs:
   build:
@@ -16,7 +12,7 @@ jobs:
     - uses: actions/checkout@v3
 
     - name: Run bandit
-      uses: ioggstream/bandit-report-artifacts@v1.7.4
+      uses: VCTLabs/bandit-report-artifacts@v2
       with:
         project_path: redis_ipc.py
-        ignore_failure: true
+        config_file: pyproject.toml
diff --git a/pyproject.toml b/pyproject.toml
@@ -38,3 +38,6 @@ include_trailing_comma = true
 force_grid_wrap = 0
 use_parentheses = true
 ensure_newline_before_comments = true
+
+[tool.bandit]
+exclude_dirs = ["docs"]