Skip to content

Fix 15 Dependabot security vulnerabilities #108

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Res260 merged 9 commits into from
May 31, 2026
Merged

Fix 15 Dependabot security vulnerabilities #108

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
f43bae8
Fix 15 Dependabot security vulnerabilities by updating dependencies
Res260 May 31, 2026
62fb63e
Test installation with pip, poetry, and uv via matrix
Res260 May 31, 2026
36022a0
fix poetry lock
Res260 May 31, 2026
fd31cb2
Use uv sync instead of uv pip install for uv matrix job
Res260 May 31, 2026
4d66241
Fix uv matrix job: use uv pip install --system instead of uv sync
Res260 May 31, 2026
0d16e36
Fix uv matrix: create venv with python3 -m venv, then install with uv
Res260 May 31, 2026
6dcf2f2
Fix uv venv: use --copies so uv writes the correct shebang
Res260 May 31, 2026
0369ea8
fix?
Res260 May 31, 2026
9cb6e46
Pin setuptools<81 so pybadges can import pkg_resources
Res260 May 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 21 additions & 2 deletions .github/workflows/tests.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,11 +14,13 @@ concurrency:

jobs:
deploy:
name: Full deployment test
name: Full deployment test (${{ matrix.install-method }})
if: github.repository == 'nsec/ctf-script'
timeout-minutes: 45
strategy:
fail-fast: false
matrix:
install-method: [pip, poetry, uv]
runs-on: ubuntu-24.04
steps:
- name: Checkout
Expand All @@ -36,9 +38,26 @@ jobs:
echo "Pulled files:"
{ git lfs ls-files | grep -E '[a-f0-9]{10}\s\*'; } || true

- name: Set up uv
if: matrix.install-method == 'uv'
uses: astral-sh/setup-uv@v5

- name: Install python dependencies
run: |
pip install -e .[workflow]
case "${{ matrix.install-method }}" in
pip)
pip install -e .[workflow]
;;
poetry)
pipx install poetry
poetry sync --no-interaction --extras workflow
echo "$(poetry env info --path)/bin" >> $GITHUB_PATH
;;
uv)
uv run --locked --extra workflow ctf --help
echo "$PWD/.venv/bin" >> $GITHUB_PATH
;;
esac

- name: ruff
run: |
Expand Down
Loading
Loading