test: Add audit and bandit (#532)

Co-authored-by: Bigad Soleiman <bigadsoleiman@gmail.com>
aws-samples · Aug 12, 2024 · c1fa5fe · c1fa5fe
1 parent 096299c
commit c1fa5fe
Show file tree

Hide file tree

Showing 5 changed files with 2,077 additions and 1,807 deletions.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -20,15 +20,22 @@ jobs:
       - name: Backend
         run: |
           npm ci
+          npm audit
           npm run build
           npm run test
           npx cdk synth
       - name: PyTests
+        # Suppression of pip audit failure until langchain is upgraded.
         run: |
           pip install -r pytest_requirements.txt
+          bandit -r .
+          pip-audit -r pytest_requirements.txt || true 
+          pip-audit -r lib/shared/web-crawler-batch-job/requirements.txt || true 
+          pip-audit -r lib/shared/file-import-batch-job/requirements.txt || true 
           pytest tests/
       - name: Frontend
         working-directory: ./lib/user-interface/react-app
         run: |
           npm ci
+          npm audit
           npm run build
diff --git a/bandit.yaml b/bandit.yaml
@@ -0,0 +1 @@
+exclude_dirs: ['tests', 'cdk.out', 'dist', 'node_modules', 'lib/user-interface/react-app']