{"repo":"victoriadrake/django-security-check","free":true,"listed":false,"github":"https://github.com/victoriadrake/django-security-check","clone":"git clone https://github.com/victoriadrake/django-security-check.git","description":"Helps you continuously monitor and fix common security vulnerabilities in your Django application.","language":"Shell","stars":93,"topics":["github-actions","continuous-integration","security-automation","security-audit","security","django","devsecops"],"license":"MIT","category":"security-tools","readme_excerpt":"Django Security Check Helps you continuously monitor and fix common security vulnerabilities in your Django application. If you are thinking of using this action, congratulations. You're well on your way to building a secure Django project! Use this in your workflow You can use this action in a workflow file to continuously run Django's check --deploy against your production Django application configuration. Here is an example workflow that runs Django Security Check on any push event to the master branch. See below for env instructions. View results In the example workflow file above, you can view results in the Action workflow run, or download them as an artifact. Check out the repositories that use this action for some examples. You can also add the check output to a comment, for example, if the workflow was triggered by a pull request. To do this, set an output parameter and use actions/github-script . Here's an example workflow you can copy that runs on pull requests: This produces: Helpful instructions for remediation are provided by Django in the output. Setting the env variables There must be a SECRET KEY value available in order for Django to run the checks. Otherwise, an ImproperlyConfigured exception is raised. If you don't deploy from your repository, you may use a dummy value. Set a repository secret with the name of SECRET KEY and include this as an environment variable as shown in the examples above. The FAIL LEVEL environment variable is the minimum severity f","default_branch":null,"files":null,"tree":[],"storefront":"/r/victoriadrake","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/victoriadrake/django-security-check/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}