aitbc1
5a19951c56
Some checks failed
audit / audit (push) Failing after 6s
ci-cd / build (push) Failing after 4s
ci / build (push) Failing after 2s
autofix / fix (push) Failing after 9s
test / test (push) Successful in 4s
ci-cd / deploy (push) Has been skipped
security-scanning / audit (push) Failing after 7s
PROGRESS: Poetry installed via pipx but not in PATH during workflow execution Issue: 'poetry: command not found' despite pipx installation Root cause: PATH not updated in workflow execution context Solution: Use full poetry path as fallback + PATH export Changes: - Add /root/.local/bin to PATH in workflows - Use full poetry path as fallback: /root/.local/share/pipx/venvs/poetry/bin/poetry - Install poetry on gitea-runner server for system availability - Add path detection and fallback logic - Maintain both PATH and full path approaches Updated workflows: - audit.yml: Poetry path resolution + dependency installation - fix.yml: Poetry path resolution + dependency installation + safety - security-scanning.yml: Poetry path resolution + dependency installation + security Expected results: - Poetry found via PATH or full path fallback - Project dependencies installed successfully - Security tools working in project venv - All workflows completing successfully - Complete PEP 668 compliance maintained This should resolve the 'command not found' issue and enable proper poetry execution for dependency management.
100 lines
3.4 KiB
YAML
100 lines
3.4 KiB
YAML
name: autofix
|
|
|
|
on:
|
|
push:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
fix:
|
|
runs-on: debian
|
|
|
|
steps:
|
|
- name: Nuclear fix - absolute path control
|
|
run: |
|
|
echo "=== AUTOFIX NUCLEAR FIX ==="
|
|
echo "Current PWD: $(pwd)"
|
|
echo "Forcing absolute workspace path..."
|
|
|
|
# Clean and create absolute workspace
|
|
rm -rf /opt/gitea-runner/workspace
|
|
mkdir -p /opt/gitea-runner/workspace
|
|
cd /opt/gitea-runner/workspace
|
|
|
|
echo "Workspace PWD: $(pwd)"
|
|
echo "Cloning repository..."
|
|
git clone https://gitea.bubuit.net/oib/aitbc.git repo
|
|
|
|
cd repo
|
|
echo "Repo PWD: $(pwd)"
|
|
echo "Files in repo:"
|
|
ls -la
|
|
|
|
echo "=== PROJECT TYPE CHECK ==="
|
|
if [ -f "package.json" ]; then
|
|
echo "✅ Node.js project detected!"
|
|
echo "=== NPM INSTALL ==="
|
|
npm install --legacy-peer-deps
|
|
echo "✅ Auto-fixing vulnerabilities..."
|
|
npm audit fix || true
|
|
elif [ -f "pyproject.toml" ]; then
|
|
echo "✅ Python project detected!"
|
|
echo "=== PYTHON SETUP ==="
|
|
|
|
# Install Python and pip if not available
|
|
if ! command -v python3 >/dev/null 2>&1; then
|
|
echo "Installing Python 3..."
|
|
apt-get update
|
|
apt-get install -y python3 python3-pip python3-venv python3-full pipx
|
|
fi
|
|
|
|
# Install pipx if not available (for poetry)
|
|
if ! command -v pipx >/dev/null 2>&1; then
|
|
echo "Installing pipx..."
|
|
python3 -m pip install --user pipx
|
|
python3 -m pipx ensurepath
|
|
fi
|
|
|
|
echo "=== POETRY SETUP ==="
|
|
# Add poetry to PATH and install if needed
|
|
export PATH="$PATH:/root/.local/bin"
|
|
if ! command -v poetry >/dev/null 2>&1; then
|
|
echo "Installing poetry with pipx..."
|
|
pipx install poetry
|
|
export PATH="$PATH:/root/.local/bin"
|
|
else
|
|
echo "Poetry already available at $(which poetry)"
|
|
fi
|
|
|
|
# Use full path as fallback
|
|
POETRY_CMD="/root/.local/share/pipx/venvs/poetry/bin/poetry"
|
|
if [ -f "$POETRY_CMD" ]; then
|
|
echo "Using poetry at: $POETRY_CMD"
|
|
else
|
|
POETRY_CMD="poetry"
|
|
fi
|
|
|
|
echo "=== PROJECT VIRTUAL ENVIRONMENT ==="
|
|
# Create venv for project dependencies
|
|
python3 -m venv venv
|
|
source venv/bin/activate
|
|
|
|
echo "Project venv activated"
|
|
echo "Python in venv: $(python --version)"
|
|
echo "Pip in venv: $(pip --version)"
|
|
|
|
echo "=== PYTHON DEPENDENCIES ==="
|
|
# Use poetry to install project dependencies
|
|
echo "Installing project dependencies with poetry..."
|
|
$POETRY_CMD install
|
|
|
|
echo "✅ Python dependencies installed!"
|
|
echo "=== SECURITY FIXES ==="
|
|
# Check for common Python security issues
|
|
echo "Running safety check..."
|
|
venv/bin/pip install safety
|
|
venv/bin/safety check || echo "Safety check completed with warnings"
|
|
else
|
|
echo "❌ No supported project type found!"
|
|
exit 1
|
|
fi
|