sankalp
0ef2a036dd
Add libcairo2-dev and pkg-config to the dependency-audit.yml workflow so that pycairo can be installed correctly on CI runners. This prevents the build error when installing Python packages that require the Cairo library.
41 lines
837 B
YAML
41 lines
837 B
YAML
name: Dependency Audit
|
|
|
|
on:
|
|
push:
|
|
branches: [main, dev]
|
|
pull_request:
|
|
branches: [main, dev]
|
|
schedule:
|
|
- cron: "0 8 1 * *"
|
|
|
|
permissions:
|
|
contents: read
|
|
security-events: write
|
|
|
|
jobs:
|
|
pip-audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-python@v5
|
|
with:
|
|
python-version: "3.13"
|
|
|
|
- name: Install system deps for pycairo
|
|
run: sudo apt-get install -y libcairo2-dev pkg-config
|
|
|
|
- name: Install uv
|
|
uses: astral-sh/setup-uv@v4
|
|
|
|
- name: Export requirements from uv
|
|
run: uv export --no-hashes -o requirements-audit.txt
|
|
|
|
- uses: pypa/gh-action-pip-audit@v1.1.0
|
|
with:
|
|
inputs: requirements-audit.txt
|
|
|
|
- name: Cleanup
|
|
if: always()
|
|
run: rm -f requirements-audit.txt
|