Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -165,7 +165,7 @@
postgres:
image: postgres:15
env:
POSTGRES_PASSWORD: postgres

Check warning on line 168 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Infrastructure Security Scan

[HIGH] Passwords And Secrets - Generic Password

Query to find passwords and secrets in infrastructure code.
POSTGRES_DB: test_wifi_densepose
options: >-
--health-cmd pg_isready
Expand Down Expand Up @@ -207,7 +207,7 @@
- name: Run unit tests
continue-on-error: true
env:
DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test_wifi_densepose

Check warning on line 210 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Infrastructure Security Scan

[HIGH] Passwords And Secrets - Password in URL

Query to find passwords and secrets in infrastructure code.
REDIS_URL: redis://localhost:6379/0
ENVIRONMENT: test
run: |
Expand All @@ -216,7 +216,7 @@
- name: Run integration tests
continue-on-error: true
env:
DATABASE_URL: postgresql://postgres:postgres@localhost:5432/test_wifi_densepose

Check warning on line 219 in .github/workflows/ci.yml

View workflow job for this annotation

GitHub Actions / Infrastructure Security Scan

[HIGH] Passwords And Secrets - Password in URL

Query to find passwords and secrets in infrastructure code.
REDIS_URL: redis://localhost:6379/0
ENVIRONMENT: test
run: |
Expand Down Expand Up @@ -269,6 +269,10 @@

- name: Start application
working-directory: archive/v1
env:
# No CSI hardware in CI — serve mock pose data so the pose endpoints
# respond 200 under load instead of erroring "requires real CSI data".
MOCK_POSE_DATA: "true"
run: |
uvicorn src.api.main:app --host 0.0.0.0 --port 8000 &
sleep 10
Expand Down Expand Up @@ -384,6 +388,8 @@

- name: Generate OpenAPI spec
working-directory: archive/v1
env:
MOCK_POSE_DATA: "true" # no CSI hardware in CI
run: |
python -c "
from src.api.main import app
Expand Down
1 change: 1 addition & 0 deletions requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -36,3 +36,4 @@ scikit-learn>=1.2.0

# Monitoring dependencies
prometheus-client>=0.16.0
psutil>=5.9.0 # system metrics — imported by health.py / metrics.py / status.py / monitoring.py
Loading