fix: add error handling to Bandit security check commands
This commit is contained in:
4
.github/workflows/security-scan.yml
vendored
4
.github/workflows/security-scan.yml
vendored
@@ -30,8 +30,8 @@ jobs:
|
|||||||
|
|
||||||
- name: Bandit security check
|
- name: Bandit security check
|
||||||
run: |
|
run: |
|
||||||
bandit -r src/ -f json -o bandit-report.json
|
bandit -r src/ -f json -o bandit-report.json || true
|
||||||
bandit -r src/ -f txt
|
bandit -r src/ -f txt || true
|
||||||
|
|
||||||
# Check for HIGH severity issues only
|
# Check for HIGH severity issues only
|
||||||
HIGH_COUNT=$(python3 -c "import json; data=json.load(open('bandit-report.json')); print(len([i for i in data['results'] if i['severity'] == 'HIGH']))")
|
HIGH_COUNT=$(python3 -c "import json; data=json.load(open('bandit-report.json')); print(len([i for i in data['results'] if i['severity'] == 'HIGH']))")
|
||||||
|
|||||||
Reference in New Issue
Block a user