Add pip audit workflow

.github/workflows/audit.yml

@@ -0,0 +1,21 @@
+name: Audit
+
+on:
+  pull_request:
+    branches:
+      - main
+  schedule:
+    - cron: '0 10 * * *'
+
+jobs:
+  audit:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - name: Check Vulnerabilities
+      uses: pypa/[email protected]
+      with:
+        inputs: requirements.txt docs/requirements.txt

CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to the Zowe Client Python SDK will be documented in this file.
 
+## Recent Changes
+
+### Bug Fixes
+
+- Fixed Core SDK package referencing a non-existent version of Secrets SDK.
+
 ## `1.0.0-dev20`
 
 ### Enhancements

scripts/license_header.py

@@ -40,7 +40,7 @@ def main():
         if "build" in root.split(os.path.sep):
             continue
         for file in files:
-            if file.endswith(".py") and file is not "_version.py":
+            if file.endswith(".py") and os.path.basename(file) != "_version.py":
                 file_path = os.path.join(root, file)
                 if not check_and_add_license_header(file_path, write_header):
                     print(f"License header missing in: {file_path}")

src/core/setup.py

@@ -40,6 +40,6 @@
         "requests~=2.32.0",
         "urllib3~=1.26.18",
     ],
-    extras_require={"secrets": [resolve_sdk_dep("secrets", "~=" + __version__)]},
+    extras_require={"secrets": [resolve_sdk_dep("secrets", "~=1.0.0.dev")]},
     packages=find_namespace_packages(include=["zowe.*"]),
 )