nas/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-11-02 05:17:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

ci(release): add OSV pass to dependency audit

Browse Source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
InfinityPacer
2026-10-22 16:43:22 +08:00
committed by InfinityPacer
parent c8517eb2f1
commit 9e24ea0c68
3 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
.github/workflows/beta.yml vendored
View File

@@ -27,6 +27,10 @@ jobs:
uvx --from pip-audit pip-audit \
--require-hashes --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-standard.txt
# PyPI 服务校验哈希但公告覆盖不全（曾漏报 Mako PYSEC-2026-4243），再用 OSV 补查一遍。
uvx --from pip-audit pip-audit \
--vulnerability-service osv --require-hashes --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-standard.txt
uv export --quiet --locked --no-default-groups --group runtime-free-threaded \
--no-emit-project --no-hashes \
@@ -38,6 +42,9 @@ jobs:
uvx --from pip-audit pip-audit \
--no-deps --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-free-threaded-normalized.txt
uvx --from pip-audit pip-audit \
--vulnerability-service osv --no-deps --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-free-threaded-normalized.txt
- name: Release version
id: release_version

7
.github/workflows/build-v3.yml vendored
View File

@@ -77,6 +77,10 @@ jobs:
uvx --from pip-audit pip-audit \
--require-hashes --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-standard.txt
# PyPI 服务校验哈希但公告覆盖不全（曾漏报 Mako PYSEC-2026-4243），再用 OSV 补查一遍。
uvx --from pip-audit pip-audit \
--vulnerability-service osv --require-hashes --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-standard.txt
uv export --quiet --locked --no-default-groups --group runtime-free-threaded \
--no-emit-project --no-hashes \
@@ -88,6 +92,9 @@ jobs:
uvx --from pip-audit pip-audit \
--no-deps --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-free-threaded-normalized.txt
uvx --from pip-audit pip-audit \
--vulnerability-service osv --no-deps --disable-pip --strict --progress-spinner off \
--requirement /tmp/moviepilot-audit-free-threaded-normalized.txt
- name: Release version
id: release_version