maint: check vulnerabilities action (#650)

Co-authored-by: pyansys-ci-bot <[email protected]>
Co-authored-by: Roberto Pastor Muela <[email protected]>

Author: 3 people

.github/workflows/ci_cd.yml

@@ -191,4 +191,15 @@ jobs:
         with:
           token: ${{ secrets.PYANSYS_CI_BOT_TOKEN }}
           bot-user: ${{ secrets.PYANSYS_CI_BOT_USERNAME }}
-          bot-email: ${{ secrets.PYANSYS_CI_BOT_EMAIL }}
+          bot-email: ${{ secrets.PYANSYS_CI_BOT_EMAIL }}
+
+  check-vulnerabilities:
+    name: "Check library vulnerabilities"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: ansys/actions/[email protected]
+        with:
+          python-version: ${{ env.MAIN_PYTHON_VERSION }}
+          token: ${{ secrets.PYANSYS_CI_BOT_TOKEN }}
+          python-package-name: ${{ env.PACKAGE_NAME }}
+          dev-mode: ${{ github.ref != 'refs/heads/main' }}

.gitignore

@@ -56,3 +56,5 @@ doc/build/
 
 doc/source/examples/gallery_examples/*
 doc/source/sg_execution_times.rst
+info_bandit.json
+info_safety.json

PULL_REQUEST_TEMPLATE.md

@@ -5,18 +5,19 @@
 **Please mention the issue number or describe the problem this pull request addresses.**
 
 ## Checklist:
-- [] Run unit tests and make sure they all pass
+- [ ] Run unit tests and make sure they all pass
 		- Run tests without Sherlock running
 		- Run tests with Sherlock GRPC connection
-- [] Check and fix style errors
+- [ ] Check and fix style errors
 		- pre-commit command line check
 		- Problems tab in PyCharm
-- [] Bench test new/modified APIs by using and modifying the code in the example for the API method
-- [] Add new classes to rst files, located at: <pysherlock>\doc\source\api
-- [] Generate documentation
-- [] Verify the HTML. It gets generated at: <pysherlock>\doc\build\html.
+- [ ] Bench test new/modified APIs by using and modifying the code in the example for the API method
+- [ ] Add new classes to rst files, located at: <pysherlock>\doc\source\api
+- [ ] Generate documentation
+- [ ] Verify the HTML. It gets generated at: <pysherlock>\doc\build\html.
 		- Open index.html
 		- Click on "API Reference" at the top.
 		- Verify HTML for API changes.
-- [] Check that test code coverage is at least 80% when Sherlock is running
-- [] Make sure that the title of the pull request follows [Commit naming conventions](https://dev.docs.pyansys.com/how-to/contributing.html#commit-naming-conventions) (e.g. ``feat: adding new PySherlock command``)
+- [ ] Check that test code coverage is at least 80% when Sherlock is running
+- [ ] Check vulnerabilities locally
+- [ ] Make sure that the title of the pull request follows [Commit naming conventions](https://dev.docs.pyansys.com/how-to/contributing.html#commit-naming-conventions) (e.g. ``feat: adding new PySherlock command``)

doc/changelog.d/650.documentation.md

@@ -0,0 +1 @@
+Maint: check vulnerabilities action