feat: enhance products with no identified vulnerabilities (#3254) #782

	name: CVE scan

	on:
	push:
	pull_request:
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	cve_scan:
	name: CVE scan on dependencies
	runs-on: ubuntu-22.04
	timeout-minutes: 10
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
	with:
	egress-policy: audit

	- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
	- uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0
	with:
	python-version: '3.x'
	cache: 'pip'
	cache-dependency-path: '**/requirements.txt'
	- name: Get date
	id: get-date
	run: \|
	echo "date=$(/bin/date -u "+%Y%m%d")" >> $GITHUB_OUTPUT
	- name: Get cached database
	uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
	with:
	path: cache
	key: Linux-cve-bin-tool-${{ steps.get-date.outputs.date }}
	- name: Install dependencies and cve-bin-tool
	run: \|
	python -m pip install --upgrade pip
	python -m pip install --upgrade setuptools
	python -m pip install --upgrade wheel
	python -m pip install --upgrade pytest
	pip install . -r doc/requirements.txt
	[[ -e cache ]] && mkdir -p .cache && mv -f cache .cache/cve-bin-tool
	sleep 5
	- name: Test to check for CVEs for Python requirements and HTML report dependencies
	run: \|
	pytest test/test_requirements.py

Provide feedback