Specify --ignore twice
#63
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Lint | |
| on: [push, pull_request, workflow_dispatch] | |
| env: | |
| FORCE_COLOR: 1 | |
| permissions: | |
| contents: read | |
| jobs: | |
| lint: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.x" | |
| cache: pip | |
| cache-dependency-path: .github/workflows/lint.yml | |
| - uses: pre-commit/[email protected] | |
| - name: Install dependencies | |
| run: | | |
| python -m pip install --upgrade pip wheel | |
| # TODO: remove setuptools installation when safety==2.4.0 is released | |
| python -m pip install --upgrade safety setuptools | |
| python -m pip install --editable . | |
| # Ignore 62044 / CVE-2023-5752, we're not using that pip or feature | |
| # Ignore 70612 / CVE-2019-8341, Jinja2 is a safety dep, not ours | |
| - run: safety check --ignore 62044 --ignore 70612 |