Merge pull request #325 from zowe/ci/fix-audit-workflow

Fix audit workflow and revert Secrets SDK version

.github/workflows/audit.yml

@@ -15,7 +15,14 @@ jobs:
     - name: Checkout
       uses: actions/checkout@v4
 
-    - name: Check Vulnerabilities
+    - name: Install Rust toolchain
+      uses: dtolnay/rust-toolchain@stable
+
+    - name: Check Python Vulnerabilities
       uses: pypa/[email protected]
       with:
         inputs: requirements.txt docs/requirements.txt
+
+    - name: Check Secrets SDK Vulnerabilities
+      working-directory: src/secrets
+      run: cargo audit --deny warnings

.github/workflows/sdk-release.yaml

@@ -50,9 +50,9 @@ jobs:
           with open(os.environ["GITHUB_OUTPUT"], 'a') as f:
             print("version=" + ("-".join(new_version.rsplit(".", 1)) if new_version.count(".") > 2 else new_version), file=f)
 
-      - name: Update version (cargo)
-        run: cargo install cargo-edit && cargo set-version ${{ steps.update-version.outputs.version }}
-        working-directory: src/secrets
+      # - name: Update version (cargo)
+      #   run: cargo install cargo-edit && cargo set-version ${{ steps.update-version.outputs.version }}
+      #   working-directory: src/secrets
 
       - name: Update version (git)
         run: git add src/_version.py src/secrets/Cargo.*

requirements.txt

@@ -19,7 +19,7 @@ pydoclint==0.5.3
 pyfakefs
 pylama==7.7.1
 pylint==3.2.5
-pytest==7.1.2
+pytest==7.4.4
 python-decouple==3.4
 PyYAML==6.0.1
 requests==2.32.0

src/secrets/Cargo.toml

@@ -2,7 +2,7 @@
 name = "keyring"
 readme = "README.md"
 repository = "https://github.com/zowe/zowe-client-python-sdk"
-version = "1.0.0-dev21"
+version = "1.0.0-dev12"
 edition = "2021"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html