ci: add cve scanning action (#53)

* ci: add cve scanning action * ci: remove python 3.7 as it is no longer supported --------- Signed-off-by: Terri Oda <terri@toybox.ca>
terriko · Jul 7, 2023 · 8674100 · 8674100
1 parent c411f0e
commit 8674100
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 2 deletions.
diff --git a/.github/workflows/cve-bin-tool.yml b/.github/workflows/cve-bin-tool.yml
@@ -0,0 +1,15 @@
+name: CVE Binary Tool Scanner
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+  schedule:
+    - cron: '20 2 * * *'
+jobs:
+  scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: intel/cve-bin-tool-action@main
+        # with:
+        #   nvd_api_key: '${{ secrets.NVD_API_KEY }}'
+        #   exclude_dir: test
diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python-version: [3.7, 3.8, 3.9]
+        python-version: [3.8, 3.9]
 
     steps:
     - uses: actions/checkout@v2
@@ -48,4 +48,3 @@ jobs:
       run: |
         cd documentation/
         make html
-