Skip to content

Commit feff4ba

Browse files
chore: add pip-audit CI script for Python fastapi project (#137)
## Summary - Add `audit:ci:fastapi` npm script that uses `uv export --frozen | uvx pip-audit` to scan Python dependencies for vulnerabilities - Append fastapi audit to `audit:ci:all` so it runs in CI alongside the JS audits - Add `uvx` to cspell dictionary ## Test Plan - [x] Verified `npm run audit:ci:fastapi` runs successfully and detects real vulnerabilities - [x] CI passes with the new audit step included in `audit:ci:all` --- Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 803df80 commit feff4ba

2 files changed

Lines changed: 3 additions & 1 deletion

File tree

cspell.config.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ words:
88
- mypy
99
- pyproject
1010
- pytest
11+
- uvx
1112
- venv
1213
ignoreWords: []
1314
import: []

package.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,8 @@
1414
"audit:ci:nuxt-api": "cd nuxt-api && npx -y audit-ci --config .auditconfig.json",
1515
"audit:ci:nest-api": "cd nest-api && npx -y audit-ci --config .auditconfig.json",
1616
"audit:ci:tanstack-ui": "cd tanstack-ui && npx -y audit-ci --config .auditconfig.json",
17-
"audit:ci:all": "npm run audit:ci:express-api && npm run audit:ci:react-next && npm run audit:ci:koa-api && npm run audit:ci:react-ui && npm run audit:ci:hono-api && npm run audit:ci:svelte-ui && npm run audit:ci:vue-ui && npm run audit:ci:nuxt-api && npm run audit:ci:nest-api && npm run audit:ci:tanstack-ui",
17+
"audit:ci:fastapi": "cd fastapi && uv export --frozen | uvx pip-audit --strict -r /dev/stdin --disable-pip --no-deps",
18+
"audit:ci:all": "npm run audit:ci:express-api && npm run audit:ci:react-next && npm run audit:ci:koa-api && npm run audit:ci:react-ui && npm run audit:ci:hono-api && npm run audit:ci:svelte-ui && npm run audit:ci:vue-ui && npm run audit:ci:nuxt-api && npm run audit:ci:nest-api && npm run audit:ci:tanstack-ui && npm run audit:ci:fastapi",
1819
"dev:express-api": "cd api && npm run dev",
1920
"dev:react-next": "cd ui && npm run dev",
2021
"dev:koa-api": "cd koa-api && npm run dev",

0 commit comments

Comments
 (0)