Merge pull request #131 from radixdlt/DO-2949-snyk-policy

ci: load snyk policy from env [DO-2949]
radixdlt · Jan 15, 2025 · 7c14c80 · 7c14c80
2 parents 64c57e1 + 24ecdd5
commit 7c14c80
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 17 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -36,6 +36,8 @@ jobs:
           role-to-assume: ${{ secrets.AWS_ROLE_NAME_SNYK_SECRET }}
           aws-region: "eu-west-2"
           role-session-name: "baylon-nodecli-${{ github.run_id }}-${{ github.run_attempt }}"
+      - name: Create .snyk file
+        run: echo "${{ vars.DOT_SNYK_FILE }}" > .snyk
       - name: Fetch AWS secrets
         uses: RDXWorks-actions/aws-secretsmanager-get-secrets@main
         with:
@@ -158,8 +160,6 @@ jobs:
         uses: RDXWorks-actions/checkout@main
         with:
           fetch-depth: 0
-      - name: Dump context
-        uses: RDXWorks-actions/ghaction-dump-context@master
       - name: Install build essentials
         run: sudo apt-get -y install build-essential
       - name: setup python
@@ -210,8 +210,6 @@ jobs:
         uses: RDXWorks-actions/checkout@main
         with:
           fetch-depth: 0
-      - name: Dump context
-        uses: RDXWorks-actions/ghaction-dump-context@master
       - name: setup python
         uses: RDXWorks-actions/setup-python@main
         with:

diff --git a/.snyk b/.snyk
diff --git a/node-runner-cli/tests/unit/test_systemd.py b/node-runner-cli/tests/unit/test_systemd.py
@@ -33,9 +33,9 @@ def file_contains_regular_expression(re_str: str, file: str) -> bool:
 class SystemdUnitTests(unittest.TestCase):
     @unittest.skip("Tests with PROMPT_FEEDS can only be run individually")
     def test_systemd_install_continue_prompt_feed(self):
-        os.environ[
-            "PROMPT_FEEDS"
-        ] = "test-prompts/individual-prompts/systemd_install_continue.yml"
+        os.environ["PROMPT_FEEDS"] = (
+            "test-prompts/individual-prompts/systemd_install_continue.yml"
+        )
         PromptFeeder.instance().load_prompt_feeds()
         SystemDSetup.confirm_config("dummy1", "dummy2", "dummy3", "dummy4")
 

diff --git a/node-runner-cli/tests/unit/test_validator.py b/node-runner-cli/tests/unit/test_validator.py
@@ -84,9 +84,9 @@ def test_validator_address_included_in_dict_from_object(self):
 
     @mock.patch("sys.stdout", new_callable=StringIO)
     def test_validator_promptfeed(self, mock_out):
-        os.environ[
-            "PROMPT_FEEDS"
-        ] = "test-prompts/individual-prompts/validator_address.yml"
+        os.environ["PROMPT_FEEDS"] = (
+            "test-prompts/individual-prompts/validator_address.yml"
+        )
         PromptFeeder.prompts_feed = PromptFeeder.instance().load_prompt_feeds()
         address = Prompts.ask_validator_address()
         self.assertEqual("validator_mock", address)