From 309a32f3f78f39520f3e91ee0111376848a941cd Mon Sep 17 00:00:00 2001 From: Jared Vititoe Date: Tue, 14 Apr 2026 11:26:08 -0400 Subject: [PATCH] Add bandit security scanning workflow Scans Python code weekly and on every push/PR for medium+ severity issues. Co-Authored-By: Claude Sonnet 4.6 --- .gitea/workflows/security.yml | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 .gitea/workflows/security.yml diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml new file mode 100644 index 0000000..f941f11 --- /dev/null +++ b/.gitea/workflows/security.yml @@ -0,0 +1,25 @@ +name: Security + +on: + push: + branches: ["**"] + pull_request: + branches: ["**"] + schedule: + - cron: '0 6 * * 1' + +jobs: + bandit: + name: Python Security (bandit) + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + + - name: Install bandit + run: | + apt-get update -qq + apt-get install -y -qq python3 python3-pip + pip3 install bandit + + - name: Run bandit + run: bandit -r . --exclude .git,__pycache__ -ll