diff --git a/.github/workflows/ci_cd.yml b/.github/workflows/ci_cd.yml index ef36c9ae..c38701ea 100644 --- a/.github/workflows/ci_cd.yml +++ b/.github/workflows/ci_cd.yml @@ -21,7 +21,8 @@ env: # It applies 7 days retention policy by default. RESET_EXAMPLES_CACHE: 0 ANSYSLMD_LICENSE_FILE: ${{ format('1055@{0}', secrets.LICENSE_SERVER) }} - MAIN_PYTHON_VERSION: '3.10' + MAIN_PYTHON_VERSION: "3.10" + LIBRARY_NAME: 'ansys-fluent-visualization' PYFLUENT_TIMEOUT_FORCE_EXIT: 5 PYFLUENT_LAUNCH_CONTAINER: 1 @@ -36,6 +37,20 @@ jobs: with: token: ${{ secrets.GITHUB_TOKEN }} + check-vulnerabilities: + name: "Check library vulnerabilities" + runs-on: ubuntu-22.04 + steps: + - uses: ansys/actions/check-vulnerabilities@main + with: + python-version: ${{ env.MAIN_PYTHON_VERSION }} + token: ${{ secrets.PYANSYS_CI_BOT_TOKEN }} + python-package-name: ${{ env.LIBRARY_NAME }} + dev-mode: ${{ github.ref != 'refs/heads/main' }} + upload-reports: True + hide-log: false + bandit-configfile: "pyproject.toml" + tests: name: Tests and coverage runs-on: ${{ matrix.os }} @@ -91,7 +106,7 @@ jobs: runs-on: [self-hosted, pyfluent] env: DOC_DEPLOYMENT_IMAGE_TAG: v25.1.0 - DOCUMENTATION_CNAME: 'visualization.fluent.docs.pyansys.com' + DOCUMENTATION_CNAME: "visualization.fluent.docs.pyansys.com" steps: - uses: actions/checkout@v4 diff --git a/pyproject.toml b/pyproject.toml index 82fab3b4..b721b1b6 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -23,7 +23,7 @@ packages = [ ] [tool.poetry.dependencies] -python = ">=3.10,<4.0" +python = ">=3.10,<3.14" importlib-metadata = {version = "^4.0", python = "<3.9"} ansys-fluent-core = ">=0.33.dev0" pyvista = ">=0.44.0"