Add bandit, pip-audit and trivy to CI/CD security pipeline
Some checks failed
CI / Lint (ruff) (push) Failing after 10s
CI / Test (pytest) (3.11) (push) Failing after 39s
CI / Test (pytest) (3.12) (push) Failing after 1m4s
Security / SAST (bandit) (push) Successful in 11s
Security / Dependency audit (pip-audit) (push) Successful in 18s

This commit is contained in:
2026-04-04 17:24:43 -03:00
parent b3b3597011
commit fe7354554f
3 changed files with 56 additions and 2 deletions

View File

@@ -15,6 +15,8 @@ dependencies = [
"jinja2>=3.1",
"pytest>=8.0",
"ruff>=0.4",
"bandit>=1.7",
"pip-audit>=2.0",
]
[project.scripts]