Run dependency audits automatically

Konstantinos Togiasrequested to merge
ci/automatic-dependency-audit into develop

Runs dependency-audit automatically in every pipeline allowed by the existing workflow. Audit failures fail the pipeline. Package publication retains its dependency on this check.

The current release audit passed in 47 seconds with no known vulnerabilities. Native GitLab CI Lint verifies automatic, blocking scheduling on main and develop. Full candidate CI follows this change.

Merge request reports

.gitlab-ci.yml

+0 −4
Changes for .gitlab-ci.yml: 0 added lines, 4 removed lines.
Original line number Diff line number Diff line
@@ -114,10 +114,6 @@ dependency-audit: 
  stage: package

  script:

  - python ci/security.py dependencies

  rules:

  - if: $CI_COMMIT_TAG || ($CI_COMMIT_BRANCH == "main" && $CI_COMMIT_REF_PROTECTED == "true" && $CI_PIPELINE_SOURCE == "push") || $CI_PIPELINE_SOURCE == "schedule" || $RUN_EXTENDED == "1"

  - when: manual

    allow_failure: true

  artifacts:

    when: always

    paths: