Refine the find-vulnerabilities to use latest scancode-action features

Signed-off-by: tdruez <tdruez@nexb.com>

Author: tdruez

.github/workflows/find-vulnerabilities.yml

@@ -13,27 +13,11 @@ jobs:
           sparse-checkout: pyproject.toml
           sparse-checkout-cone-mode: false
 
-      - uses: aboutcode-org/scancode-action@main
+      - name: Fail on known vulnerabilities
+        uses: aboutcode-org/scancode-action@main
         with:
           pipelines: "inspect_packages:StaticResolver,find_vulnerabilities"
+          check-compliance: true
+          compliance-fail-on-vulnerabilities: true
         env:
           VULNERABLECODE_URL: https://public.vulnerablecode.io/
-
-      - name: Fail in case of vulnerabilities
-        shell: bash
-        run: |
-          scanpipe shell --command '
-          from scanpipe.models import Project
-          project = Project.objects.get()
-          packages_qs = project.discoveredpackages.vulnerable()
-          dependencies_qs = project.discovereddependencies.vulnerable()
-          vulnerability_count = packages_qs.count() + dependencies_qs.count()
-          if vulnerability_count:
-              print(vulnerability_count, "vulnerabilities found:")
-              for entry in [*packages_qs, *dependencies_qs]:
-                  print(entry)
-              exit(1)
-          else:
-              print("No vulnerabilities found")
-              exit(0)
-          '

pyproject.toml

@@ -164,7 +164,9 @@ dependencies = [
     "maturin==1.8.6",
     "setuptools-rust==1.11.1",
     "annotated-types==0.7.0",
-    "semantic-version==2.10.0"
+    "semantic-version==2.10.0",
+    # Introduce vulnerability on purpose
+    "abupy==0.0.1"
 ]
 
 [project.optional-dependencies]