Run dependency scanner CI job on schedule as well

This commit is contained in:
Kovid Goyal 2025-09-23 08:46:03 +05:30
parent 2f983c178f
commit 508b022721
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
2 changed files with 39 additions and 23 deletions

View file

@ -199,29 +199,6 @@ jobs:
- name: Run benchmarks
run: ./benchmark.py
dependecy-scanner:
name: Scan dependencies for vulnerabilities
runs-on: ubuntu-latest
env:
KITTY_BUNDLE: 1
steps:
- name: Checkout source code
uses: actions/checkout@v5
with:
fetch-depth: 10
persist-credentials: false
- name: Checkout bypy
uses: actions/checkout@v5
with:
fetch-depth: 1
persist-credentials: false
repository: kovidgoyal/bypy
path: bypy-src
- name: Check dependencies
run: python3 .github/workflows/ci.py check-dependencies
linux-dev:
name: Test ./dev.sh and benchmark
runs-on: ubuntu-latest

39
.github/workflows/depscan.yml vendored Normal file
View file

@ -0,0 +1,39 @@
name: Depscan
on:
push:
branches: [master]
schedule:
- cron: '0 12 * * 5'
env:
CI: 'true'
ASAN_OPTIONS: detect_leaks=0
LC_ALL: en_US.UTF-8
LANG: en_US.UTF-8
permissions:
contents: read # to fetch code (actions/checkout)
jobs:
dependecy-scanner:
name: Scan dependencies for vulnerabilities
runs-on: ubuntu-latest
env:
KITTY_BUNDLE: 1
steps:
- name: Checkout source code
uses: actions/checkout@v5
with:
fetch-depth: 10
persist-credentials: false
- name: Checkout bypy
uses: actions/checkout@v5
with:
fetch-depth: 1
persist-credentials: false
repository: kovidgoyal/bypy
path: bypy-src
- name: Check dependencies
run: python3 .github/workflows/ci.py check-dependencies