CVE Scanning for Python #118

	name: CVE Scanning for Python

	on:
	schedule:
	- cron: '0 8,18 * * 1-5'
	push:
	paths:
	- 'pyproject.toml'
	- 'safety-policy.yml'
	- '.github/workflows/cve-scanning-python.yml'

	env:
	PYTHON_KEYRING_BACKEND: keyring.backends.null.Keyring

	jobs:
	scan:
	name: Build and test App
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: actions/setup-python@v4
	with:
	python-version: "3.11"
	- uses: abatilo/actions-poetry@437d4fa27baf74d89b789ba2d8cae97dd2365feb
	with:
	poetry-version: "1.2.2"
	- name: Install safety
	run: pip3 install safety
	#- name: Build app
	# run: poetry build
	# working-directory: .
	#- name: Rune Python Runtime
	# run: \|
	# poetry install
	# working-directory: .
	- name: Scan CVEs
	# run: poetry export --without-hashes -f requirements.txt \| safety check --full-report --stdin --policy-file safety-policy.yml
	# Without poetry, use this command instead
	run: safety check -r requirements.txt --full-report --policy-file safety-policy.yml
	working-directory: .

Provide feedback