Skip to content
This repository was archived by the owner on Mar 30, 2026. It is now read-only.

chore: update action pin to v0.4.3#6

Merged
lhoupert merged 1 commit into
mainfrom
chore/update-action-v0.4.3
Mar 28, 2026
Merged

chore: update action pin to v0.4.3#6
lhoupert merged 1 commit into
mainfrom
chore/update-action-v0.4.3

Conversation

@lhoupert
Copy link
Copy Markdown
Owner

Automated update of lhoupert/action-python-security-auditing pin to v0.4.3.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Mar 28, 2026

❌ Some test workflows did not match expectations

8 passed, 6 failed

Test Name Expected Actual Bandit pip-audit Result
01 requirements · flat · clean success success
02 requirements · src/ · bandit HIGH failure failure B105, B404, B602
03 requirements · src/+scripts/ · bandit HIGH + pip-audit failure failure B105, B404, B602
04 uv · flat · clean success success
05 uv · src/ · pip-audit vuln failure success
06 uv · src/+scripts/ · bandit MEDIUM failure failure B324, B506
07 poetry · flat · clean success success
08 poetry · src/ · bandit MEDIUM + pip-audit failure failure B105, B324
09 pipenv · flat · clean success success
10 pipenv · src/+scripts/ · bandit HIGH failure failure B404, B602
11 requirements · flat · clean (root working dir) success failure flask
12 uv · flat · bandit-only (no pip-audit) failure failure B404, B602 disabled
13 requirements · flat · unfixable vulns (should pass) success success
14 uv · flat · low threshold (B101 assert) failure failure B101 disabled

Error details

Test 03 — requirements · src/+scripts/ · bandit HIGH + pip-audit

  • pip-audit: expected vuln for requests not found
  • pip-audit: expected vuln for Pillow not found

Test 05 — uv · src/ · pip-audit vuln

  • Conclusion: expected failure, got success
  • pip-audit: expected vuln for requests not found

Test 06 — uv · src/+scripts/ · bandit MEDIUM

  • Bandit: expected B303 not found in results

Test 08 — poetry · src/ · bandit MEDIUM + pip-audit

  • Bandit: expected B303 not found in results
  • pip-audit: expected vuln for cryptography not found
  • pip-audit: expected vuln for requests not found

Test 11 — requirements · flat · clean (root working dir)

  • Conclusion: expected success, got failure
  • pip-audit: expected no vulns, got 1 (flask)

Test 13 — requirements · flat · unfixable vulns (should pass)

  • pip-audit: expected vuln for pygments not found

@lhoupert lhoupert merged commit cc3e691 into main Mar 28, 2026
11 of 20 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant