Skip to content

ci: integrate lightweight automated pip-audit dependency scanner#352

Merged
imDarshanGK merged 9 commits into
imDarshanGK:mainfrom
Sahil07-codes:feat/dependency-ci-scan
Jun 14, 2026
Merged

ci: integrate lightweight automated pip-audit dependency scanner#352
imDarshanGK merged 9 commits into
imDarshanGK:mainfrom
Sahil07-codes:feat/dependency-ci-scan

Conversation

@Sahil07-codes

Copy link
Copy Markdown
Contributor

Closes #308

Changes Implemented:

  • Created a dedicated, lightweight .github/workflows/dependency-security.yml workflow running pip-audit.
  • Configured the workflow to run isolated on Python 3.11 to maintain complete compatibility with the codebase's strict requirements layer.
  • Appended local verification setup and execution steps to backend/README.md.

Verification Demo:
Tested the auditor locally within an active environment workspace. The scanner accurately caught and mapped existing dependency CVE records:

image

@vercel

vercel Bot commented Jun 7, 2026

Copy link
Copy Markdown

@Sahil07-codes is attempting to deploy a commit to the Darshan's projects Team on Vercel.

A member of the Team first needs to authorize it.

@Sahil07-codes

Copy link
Copy Markdown
Contributor Author

HI @imDarshanGK ,

i have submitted a PR regarding the Issue #352 , kindly review it and let me know about any furthur changes to be made.

@imDarshanGK imDarshanGK added SSoC26 Part of Social Summer of Code 2026 Medium Feature or backend work with moderate scope labels Jun 12, 2026
@imDarshanGK

Copy link
Copy Markdown
Owner

@Sahil07-codes resolve conflicts

@Sahil07-codes

Copy link
Copy Markdown
Contributor Author

Hi @imDarshanGK,

All automated checks and the security dependency auditing pipelines are now running successfully and passing green! The multi-way documentation merge conflicts have also been cleanly resolved.

The implementation is 100% stable, fully verified, and ready for your final review.

Thank you!

@imDarshanGK imDarshanGK merged commit 2a98b8f into imDarshanGK:main Jun 14, 2026
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Medium Feature or backend work with moderate scope SSoC26 Part of Social Summer of Code 2026

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add dependency vulnerability scanning to CI

2 participants