From c4d55fed1b0980506d3d639ec35d691b0d86e117 Mon Sep 17 00:00:00 2001 From: Xuwznln <18435084+Xuwznln@users.noreply.github.com> Date: Wed, 1 Oct 2025 16:21:00 +0800 Subject: [PATCH] Fix release build --- .github/workflows/publish.yml | 16 +++++----------- 1 file changed, 5 insertions(+), 11 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 4a6fd67..b323529 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -127,18 +127,12 @@ jobs: steps: - uses: actions/checkout@v5 - - name: Set up Python - uses: actions/setup-python@v6 + - name: Run Safety CLI to check for vulnerabilities + uses: pyupio/safety-action@v1 with: - python-version: "3.10" # Use minimum version for consistency - - - name: Install security tools - run: | - python -m pip install --upgrade pip - pip install "safety>=3.0.0" "typer<0.12.0" "marshmallow<4.0.0" - - - name: Run safety security scan - run: safety check --output json > safety-report.json + api-key: ${{ secrets.SAFETY_CHECK }} + output-format: json + args: --detailed-output --output-format json - name: Upload security reports uses: actions/upload-artifact@v4