From 644167c47530c01cf3840f0571fd3eeae1447d25 Mon Sep 17 00:00:00 2001 From: wkobiela Date: Mon, 29 Jan 2024 18:33:10 +0100 Subject: [PATCH] Fix workflow --- .github/workflows/bandit.yaml | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/.github/workflows/bandit.yaml b/.github/workflows/bandit.yaml index f6b641d..a88dc94 100644 --- a/.github/workflows/bandit.yaml +++ b/.github/workflows/bandit.yaml @@ -21,9 +21,9 @@ on: jobs: bandit: permissions: - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results - actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status + contents: read # for actions/checkout to fetch code + security-events: write # for github/codeql-action/upload-sarif to upload SARIF results + actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status runs-on: ubuntu-latest steps: @@ -33,9 +33,8 @@ jobs: fetch-depth: 0 - name: Install dependencies - shell: bash - run: | - pip install bandit bandit-sarif-formatter + run: | + pip install bandit bandit-sarif-formatter - name: Run Bandit scan shell: bash @@ -107,10 +106,10 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload artifact - uses: actions/upload-artifact@v4 - with: - name: results.sarif - path: results.sarif + uses: actions/upload-artifact@v4 + with: + name: results.sarif + path: results.sarif - name: Upload SARIF file uses: github/codeql-action/upload-sarif@v3