centurion_erp/.github/workflows/vuln_scan.yaml at 528c900a3bbc6e8837dbb33ad8d6865e84377584 · nofusscomputing/centurion_erp · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
---

name: 'Vulnerability Scan'


on:
  schedule:
    # Every day at 14:30 UTC / 00:00 +09:30
    - cron: "30 14 * * *"

env:
  PYTHON_VERSION: '3.11'
  PYTHON_VERSIONS: '["3.10","3.11","3.12","3.13"]'

jobs:


  init:
    if: ${{ github.repository == 'nofusscomputing/centurion_erp' }}
    runs-on: ubuntu-latest
    outputs:
      PYTHON_VERSION: ${{ steps.python-vars.outputs.ENV_PYTHON_VERSION }}
      PYTHON_VERSIONS: ${{ steps.python-vars.outputs.ENV_PYTHON_VERSIONS }}
    steps:


      - name: Use Workflow env vars
        id: python-vars
        shell: bash
        run: |
          echo 'ENV_PYTHON_VERSION=${{ env.PYTHON_VERSION }}' >> $GITHUB_OUTPUT

          echo 'ENV_PYTHON_VERSIONS=${{ env.PYTHON_VERSIONS }}' >> $GITHUB_OUTPUT


  vuln-master:
    name: '"master" branch'
    uses: nofusscomputing/action_python/.github/workflows/python.yaml@development
    needs:
      - init
    secrets:
      WORKFLOW_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}
    with:
      BRANCH: master
      DEFAULT_ONLY: ${{
        github.ref_type != 'tag'
        && github.ref_name != 'master'
        && github.ref_name != 'development'
        && ! startsWith(github.ref_name, 'feat-') }}
      PYTHON_VERSION: ${{ needs.init.outputs.PYTHON_VERSION }}
      PYTHON_VERSIONS: ${{ needs.init.outputs.PYTHON_VERSIONS }}


  vuln-development:
    name: '"development" branch'
    uses: nofusscomputing/action_python/.github/workflows/python.yaml@development
    needs:
      - init
    secrets:
      WORKFLOW_TOKEN: ${{ secrets.WORKFLOW_TOKEN }}
    with:
      BRANCH: development
      DEFAULT_ONLY: ${{
        github.ref_type != 'tag'
        && github.ref_name != 'master'
        && github.ref_name != 'development'
        && ! startsWith(github.ref_name, 'feat-') }}
      PYTHON_VERSION: ${{ needs.init.outputs.PYTHON_VERSION }}
      PYTHON_VERSIONS: ${{ needs.init.outputs.PYTHON_VERSIONS }}