-
Notifications
You must be signed in to change notification settings - Fork 118
Closed
Labels
maintenanceTasks related to infrastructure & dependenciesTasks related to infrastructure & dependencies
Milestone
Description
Problem Description
As a developer, it would be useful to get a static code analysis of our library every so often so we aren't accidently introducing known vulnerabilities.
Expected behavior
- Add a Github Actions workflow that runs when a release is made. This action should
- Run Bandit
- Store the output as a file at the base level of the repo
- Make sure the file doesn't get included when creating the package for Copulas
Additional context
Metadata
Metadata
Assignees
Labels
maintenanceTasks related to infrastructure & dependenciesTasks related to infrastructure & dependencies