Update

Author: JonZeolla

.github/workflows/ci.yml

@@ -58,15 +58,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
-      - name: Install the dependencies
-        run: |
-          python -m pip install --upgrade pipenv
-          mkdir "${RUNNER_TEMP}/bin"
-          curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b "${RUNNER_TEMP}/bin"
-          chmod +x "${RUNNER_TEMP}/bin/syft"
-          curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b "${RUNNER_TEMP}/bin"
-          chmod +x "${RUNNER_TEMP}/bin/grype"
-          echo "${RUNNER_TEMP}/bin" >> "${GITHUB_PATH}"
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo
@@ -96,8 +87,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
-      - name: Install the dependencies
-        run: python -m pip install --upgrade pipenv
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo

.github/workflows/security.yml

@@ -26,14 +26,12 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
-      - name: Install the dependencies
-        run: |
-          python -m pip install --upgrade pipenv
-          echo "CODEQL_PYTHON=$(pipenv run which python)" >> "${GITHUB_ENV}"
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo
         run: task -v init
+      - name: Setup CodeQL
+        run: echo "CODEQL_PYTHON=$(pipenv run which python)" >> "${GITHUB_ENV}"
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
         with:

.github/workflows/update.yml

@@ -30,8 +30,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
-      - name: Install the dependencies
-        run: python -m pip install --upgrade pipenv
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo

.pre-commit-config.yaml

@@ -1,6 +1,6 @@
 ---
 repos:
   - repo: https://github.com/seisollc/goat
-    rev: a8d2863396772ec95330996372dd4e48f2490438  # frozen: v2023.08.22
+    rev: 6525fcbbea8dacda7c09e20ac8a78c2b763ccaa4  # frozen: v2023.08.26
     hooks:
       - id: seiso-lint

Pipfile.lock

@@ -33,6 +33,8 @@ tasks:
     internal: true
     sources:
       - Pipfile.lock
+    preconditions:
+      - which pipenv || python -m pip install --upgrade pipenv
     cmds:
       - pipenv install --deploy --ignore-pipfile --dev
 

Taskfile.yml

@@ -49,15 +49,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ "{{ runner.os }}" }}-python-${{ "{{ env.python_version }}" }}-pipenv-${{ "{{ hashFiles('Pipfile.lock') }}" }}
-      - name: Install the dependencies
-        run: |
-          python -m pip install --upgrade pipenv
-          mkdir "${RUNNER_TEMP}/bin"
-          curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b "${RUNNER_TEMP}/bin"
-          chmod +x "${RUNNER_TEMP}/bin/syft"
-          curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b "${RUNNER_TEMP}/bin"
-          chmod +x "${RUNNER_TEMP}/bin/grype"
-          echo "${RUNNER_TEMP}/bin" >> "${GITHUB_PATH}"
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo
@@ -118,8 +109,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ "{{ runner.os }}" }}-python-${{ "{{ env.python_version }}" }}-pipenv-${{ "{{ hashFiles('Pipfile.lock') }}" }}
-      - name: Install the dependencies
-        run: python -m pip install --upgrade pipenv
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo
@@ -169,8 +158,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ "{{ runner.os }}" }}-python-${{ "{{ env.python_version }}" }}-pipenv-${{ "{{ hashFiles('Pipfile.lock') }}" }}
-      - name: Install the dependencies
-        run: python -m pip install --upgrade pipenv
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo

goat

@@ -39,8 +39,6 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ "{{ runner.os }}" }}-python-${{ "{{ env.python_version }}" }}-pipenv-${{ "{{ hashFiles('Pipfile.lock') }}" }}
-      - name: Install the dependencies
-        run: python -m pip install --upgrade pipenv
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo

{{cookiecutter.project_name|replace(" ", "")}}/.github/workflows/commit.yml

@@ -36,14 +36,12 @@ jobs:
         with:
           path: ~/.local/share/virtualenvs
           key: ${{ "{{ runner.os }}" }}-python-${{ "{{ env.python_version }}" }}-pipenv-${{ "{{ hashFiles('Pipfile.lock') }}" }}
-      - name: Install the dependencies
-        run: |
-          python -m pip install --upgrade pipenv
-          echo "CODEQL_PYTHON=$(pipenv run which python)" >> "${GITHUB_ENV}"
       - name: Install Task
         uses: arduino/setup-task@v1
       - name: Initialize the repo
         run: task -v init
+      - name: Setup CodeQL
+        run: echo "CODEQL_PYTHON=$(pipenv run which python)" >> "${GITHUB_ENV}"
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
         with: