Merge pull request #53 from tj-actions/chore/remove-support-for-versi…

…on-input

Remove support for version input

Dockerfile

@@ -2,6 +2,11 @@ FROM python:3.9-slim-buster
 
 LABEL maintainer="Tonye Jack <jtonye@ymail.com>"
 
+RUN python3 -m venv /venv && \
+  /venv/bin/pip3 install bandit
+
+ENV PATH="/venv/bin:${PATH}"
+
 COPY entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
 ENTRYPOINT ["/entrypoint.sh"]

README.md

@@ -30,7 +30,6 @@
       - name: Run bandit
         uses: tj-actions/bandit@v4.1
         with:
-          version: "1.7.0"
           targets: |  # or a single string "." 
             test_package
           options: "-r"
@@ -40,7 +39,6 @@
 
 |   Input       |    type    |  required     |  default                      |  description  |
 |:-------------:|:-----------:|:-------------:|:----------------------------:|:-------------:|
-| version |  `string`   |    `true`    | `1.7.0`                      | Bandit version to be installed ([possible choices](https://github.com/PyCQA/bandit/tags))  |
 | targets |  `string[] or string`   |    `true`    | `.`                      | Targets to run bandit checks  |
 | options |  `string`   |    `true`    | `-r`                      | Extra options ([possible choices](https://github.com/tj-actions/bandit/blob/main/action.yml#L13))  |
 

action.yml

@@ -2,10 +2,6 @@ name: Run bandit
 description: A security linter from PyCQA
 author: tj-actions
 inputs:
-  version:
-    description: bandit version to be used
-    required: true
-    default: '1.7.0'
   targets:
     description: Module(s)/Package(s) to run bandit checks
     required: true

entrypoint.sh

@@ -2,7 +2,5 @@
 
 set -e
 
-pip3 install bandit=="${INPUT_VERSION}". --no-cache-dir
-
 # shellcheck disable=SC2086
 bandit ${INPUT_OPTIONS} ${INPUT_TARGETS}