ENH: Use gh-action-pip-audit

VOICEVOX · Jan 23, 2025 · 65f8fa4 · 65f8fa4
1 parent 15009db
commit 65f8fa4
Show file tree

Hide file tree

Showing 4 changed files with 258 additions and 244 deletions.
diff --git a/.github/workflows/test-security.yml b/.github/workflows/test-security.yml
@@ -1,5 +1,4 @@
 # Python 依存パッケージの脆弱性診断を定期的に行う
-# NOTE: 公式 Action は API key 等を必要とするため利用しない（https://github.com/pyupio/safety-action/tree/main）
 
 name: test-security
 
@@ -24,7 +23,9 @@ jobs:
           requirements-suffix: "-dev"
 
       - name: <Test> Check Python dependency security
-        run: safety check -r requirements.txt -r requirements-dev.txt -r requirements-build.txt -o bare
+        uses: pypa/[email protected]
+        with:
+          inputs: requirements.txt requirements-dev.txt requirements-build.txt
 
       - name: <Deploy> Notify Discord of security testing result
         uses: sarisia/actions-status-discord@v1