From 11a99fc95b5b5c97b7b890dd6cc3df085710654a Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 11:35:25 +1100 Subject: [PATCH 1/8] Create main.yml --- .github/workflows/main.yml | 42 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 0000000..2a1d135 --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,42 @@ +name: Generate requirements.txt + +on: [push] + +jobs: + build: + runs-on: ubuntu-latest + + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: '3.x' + cache: 'pipenv' # Optional: Caches the pipenv environment + + + - name: Install pipenv + run: pip install pipenv + + - name: Install project dependencies and generate requirements.txt + run: | + pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv + pipenv requirements --dev > requirements.txt + + + - name: Upload requirements.txt as artifact (optional) + uses: actions/upload-artifact@v4 + with: + name: requirements-file + path: requirements.txt + + - name: Commit and push requirements.txt (optional, if you want to commit the file back to the repo) + run: | + git config user.name github-actions[bot] + git config user.email github-actions[bot]@users.noreply.github.com + git add requirements.txt + git commit -m "Generate requirements.txt from Pipfile.lock" + git push + continue-on-error: true # Prevents workflow failure if no changes to commit From 612b0907fa40081748d9fa994f936f64bc773c39 Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 11:37:12 +1100 Subject: [PATCH 2/8] Update main.yml --- .github/workflows/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 2a1d135..551d5b1 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -22,7 +22,7 @@ jobs: - name: Install project dependencies and generate requirements.txt run: | - pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv + #pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv pipenv requirements --dev > requirements.txt From c4fad2e0bc4ea2971309e31e3eb7fdd4cc1ce176 Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 11:40:00 +1100 Subject: [PATCH 3/8] Update main.yml --- .github/workflows/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 551d5b1..fabb314 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -13,7 +13,7 @@ jobs: - name: Set up Python uses: actions/setup-python@v5 with: - python-version: '3.x' + python-version: '3.8' cache: 'pipenv' # Optional: Caches the pipenv environment @@ -22,7 +22,7 @@ jobs: - name: Install project dependencies and generate requirements.txt run: | - #pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv + pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv pipenv requirements --dev > requirements.txt From 479f66b06af65b5f2e88cd8f75a6b19d6d9163cb Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 11:41:49 +1100 Subject: [PATCH 4/8] Update main.yml --- .github/workflows/main.yml | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index fabb314..ae60dbd 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -24,14 +24,9 @@ jobs: run: | pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv pipenv requirements --dev > requirements.txt + cat requirements.txt - - name: Upload requirements.txt as artifact (optional) - uses: actions/upload-artifact@v4 - with: - name: requirements-file - path: requirements.txt - - name: Commit and push requirements.txt (optional, if you want to commit the file back to the repo) run: | git config user.name github-actions[bot] From 05d785dd552c3c950fd21aaad4bb337540c66582 Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 11:43:50 +1100 Subject: [PATCH 5/8] Create requirements.txt --- requirements.txt | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 requirements.txt diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..712f662 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,7 @@ +click==8.0.1; python_version >= '3.6' +flask==2.0.2 +itsdangerous==2.0.1; python_version >= '3.6' +jinja2==3.0.2; python_version >= '3.6' +markupsafe==2.0.1; python_version >= '3.6' +python-dotenv==0.19.0 +werkzeug==2.0.2; python_version >= '3.6' From 7756cf8d87fb7ba02d2b93b51ab980b36a09180d Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 11:44:55 +1100 Subject: [PATCH 6/8] Delete .github/workflows/main.yml --- .github/workflows/main.yml | 37 ------------------------------------- 1 file changed, 37 deletions(-) delete mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml deleted file mode 100644 index ae60dbd..0000000 --- a/.github/workflows/main.yml +++ /dev/null @@ -1,37 +0,0 @@ -name: Generate requirements.txt - -on: [push] - -jobs: - build: - runs-on: ubuntu-latest - - steps: - - name: Checkout repository - uses: actions/checkout@v4 - - - name: Set up Python - uses: actions/setup-python@v5 - with: - python-version: '3.8' - cache: 'pipenv' # Optional: Caches the pipenv environment - - - - name: Install pipenv - run: pip install pipenv - - - name: Install project dependencies and generate requirements.txt - run: | - pipenv install --dev --skip-lock # Install dependencies first to make sure they are in the venv - pipenv requirements --dev > requirements.txt - cat requirements.txt - - - - name: Commit and push requirements.txt (optional, if you want to commit the file back to the repo) - run: | - git config user.name github-actions[bot] - git config user.email github-actions[bot]@users.noreply.github.com - git add requirements.txt - git commit -m "Generate requirements.txt from Pipfile.lock" - git push - continue-on-error: true # Prevents workflow failure if no changes to commit From 6e228874380acffda8877b717459fee8394bc8e7 Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 15:11:18 +1100 Subject: [PATCH 7/8] Create main.yml --- .github/workflows/main.yml | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml new file mode 100644 index 0000000..562d907 --- /dev/null +++ b/.github/workflows/main.yml @@ -0,0 +1,17 @@ +name: Component Detection + +on: + workflow_dispatch: + push: + +permissions: + id-token: write + contents: write + +jobs: + dependency-submission: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: Component detection + uses: advanced-security/component-detection-dependency-submission-action@v0.1.1 From eae22f5b6189a806c3c0974054903e244b3534ad Mon Sep 17 00:00:00 2001 From: csrivera2 <33880513+csrivera2@users.noreply.github.com> Date: Mon, 23 Mar 2026 17:02:52 +1100 Subject: [PATCH 8/8] Delete .github/workflows/main.yml --- .github/workflows/main.yml | 17 ----------------- 1 file changed, 17 deletions(-) delete mode 100644 .github/workflows/main.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml deleted file mode 100644 index 562d907..0000000 --- a/.github/workflows/main.yml +++ /dev/null @@ -1,17 +0,0 @@ -name: Component Detection - -on: - workflow_dispatch: - push: - -permissions: - id-token: write - contents: write - -jobs: - dependency-submission: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - name: Component detection - uses: advanced-security/component-detection-dependency-submission-action@v0.1.1