try bandit action

Signed-off-by: BAStos525 <[email protected]>

.github/workflows/pr-pytests.yml

@@ -9,18 +9,18 @@ on:
     branches: [i2/ci/py-sonar]
 
 jobs:
-  # pytest:
-  #   runs-on: ubuntu-latest
-  #   strategy:
-  #     matrix:
-  #       python-version: [ 3.8 ]
-  #   steps:
-  #     - name: Set up Python ${{ matrix.python-version }}
-  #       uses: actions/setup-python@v4
-  #       with:
-  #         python-version: ${{ matrix.python-version }}
-  #     - name: Checkout code
-  #       uses: actions/checkout@v4
+  pytest:
+    runs-on: ubuntu-latest
+    # strategy:
+    #   matrix:
+    #     python-version: [ 3.8 ]
+    steps:
+      # - name: Set up Python ${{ matrix.python-version }}
+      #   uses: actions/setup-python@v4
+      #   with:
+      #     python-version: ${{ matrix.python-version }}
+      - name: Checkout code
+        uses: actions/checkout@v4
   #     # - name: Install dependencies
   #     #   run: pip install poetry tomli-w
   #     # - name: Checkout irohad repo code
@@ -44,43 +44,44 @@ jobs:
   #     #                   pip install pytest faker allure-pytest pytest-cov bandit pylint &&
   #     #                   pip install --break-system-packages target/wheels/iroha2-*.whl &&
   #     #                   python -m pytest --cov=. --cov-report xml:coverage-reports/coverage-iroha-python.xml tests/"
-  #     - name: Run Bandit
-  #       run: |
-  #         pip install bandit
-  #         bandit -r tests/ -f json -o bandit-report.json
-  #     # - name: Run pylint
-  #     #   run: |
-  #     #     pip install pylint
-  #     #     pylint tests > pylint-report.txt
-  #     # - name: SonarQube
-  #     #   if: always()
-  #     #   uses: sonarsource/sonarqube-scan-action@master
-  #     #   env:
-  #     #     SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-  #     #     SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
-  #     # - name: Tear down the network
-  #     #   run: cd iroha_daemon && scripts/test_env.py cleanup
-
-  analyze:
-    runs-on: ubuntu-latest
-    permissions:
-      # required for all workflows
-      security-events: write
-      # only required for workflows in private repositories
-      actions: read
-      contents: read
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-      - name: Perform Bandit Analysis
-        uses: PyCQA/bandit-action@v1
-        with:
-          targets: "tests/"
-      - name: show results
-        run: cat results.sarif
+      - name: Run Bandit
+        continue-on-error: true
+        run: |
+          pip install bandit
+          bandit -r tests/ -f json -o bandit-report.json
+      # - name: Run pylint
+      #   run: |
+      #     pip install pylint
+      #     pylint tests > pylint-report.txt
       - name: SonarQube
         if: always()
         uses: sonarsource/sonarqube-scan-action@master
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+      # - name: Tear down the network
+  #     #   run: cd iroha_daemon && scripts/test_env.py cleanup
+
+  # analyze:
+  #   runs-on: ubuntu-latest
+  #   permissions:
+  #     # required for all workflows
+  #     security-events: write
+  #     # only required for workflows in private repositories
+  #     actions: read
+  #     contents: read
+  #   steps:
+  #     - name: Checkout code
+  #       uses: actions/checkout@v4
+  #     - name: Perform Bandit Analysis
+  #       uses: PyCQA/bandit-action@v1
+  #       with:
+  #         targets: "tests/"
+  #     - name: show results
+  #       run: cat results.sarif
+  #     - name: SonarQube
+  #       if: always()
+  #       uses: sonarsource/sonarqube-scan-action@master
+  #       env:
+  #         SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+  #         SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}

sonar-project.properties

@@ -1,4 +1,4 @@
 sonar.projectKey = hyperledger-iroha:iroha-python
 sonar.language = py
-sonar.python.bandit.reportPaths = results.sarif
+sonar.python.bandit.reportPaths = bandit-report.json
 sonar.python.pylint.reportPaths = pylint-report.txt