[Snyk] Security upgrade cryptography from 40.0.1 to 41.0.3 #1260
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| # Enable Buildkit and let compose use it to speed up image building | |
| env: | |
| DATABASE_URL: 'postgis://envergo:envergo@localhost:5432/envergo' | |
| USE_DOCKER: False | |
| LANG: 'fr_FR.UTF-8' | |
| LC_ALL: 'fr_FR.UTF-8' | |
| on: | |
| pull_request: | |
| branches: [ "main" ] | |
| push: | |
| branches: [ "main" ] | |
| jobs: | |
| linter: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout Code Repository | |
| uses: actions/checkout@v3 | |
| - name: Set up Python 3.9 | |
| uses: actions/setup-python@v4.3.0 | |
| with: | |
| python-version: 3.9 | |
| # Run all pre-commit hooks on all the files. | |
| # Getting only staged files can be tricky in case a new PR is opened | |
| # since the action is run on a branch in detached head state | |
| - name: Install and Run Pre-commit | |
| uses: pre-commit/action@v3.0.0 | |
| # With no caching at all the entire ci process takes 4m 30s to complete! | |
| pytest: | |
| runs-on: ubuntu-latest | |
| # Configure the database service | |
| services: | |
| database: | |
| image: postgis/postgis:13-master | |
| env: | |
| POSTGRES_USER: envergo | |
| POSTGRES_PASSWORD: envergo | |
| POSTGRES_DB: envergo | |
| ports: | |
| - 5432:5432 | |
| # Set health checks to wait until postgres has started | |
| options: >- | |
| --health-cmd pg_isready | |
| --health-interval 10s | |
| --health-timeout 5s | |
| --health-retries 5 | |
| steps: | |
| - name: Update package list | |
| run: | | |
| sudo apt update | |
| - name: Install french locale | |
| run: | | |
| sudo apt install language-pack-fr | |
| sudo locale-gen | |
| - name: Activate french locale | |
| run: | | |
| sudo update-locale LANG="fr_FR.UTF-8" LC_ALL="fr_FR.UTF-8" | |
| - name: Install dependencies | |
| run: | | |
| sudo apt install binutils libproj-dev gdal-bin gettext | |
| - name: Checkout Code Repository | |
| uses: actions/checkout@v3 | |
| - name: Set up Python 3.9 | |
| uses: actions/setup-python@v4.3.0 | |
| with: | |
| python-version: 3.9 | |
| - name: Install python dependencies | |
| run: pip install -r requirements/local.txt | |
| - name: Install js dependencies | |
| run: npm ci | |
| - name: Build assets | |
| run: bash bin/build_assets.sh | |
| - name: Run DB Migrations | |
| run: bash bin/post_deploy.sh | |
| - name: Run Django Tests | |
| run: pytest |