aiverify-moonshot 0.4.5__tar.gz → 0.4.6__tar.gz

{aiverify_moonshot-0.4.5 → aiverify_moonshot-0.4.6}/.github/scripts/create_backup.sh

@@ -1,12 +1,18 @@
 #!/bin/bash
 
-# Define the backup directory and the maximum number of backups
-BACKUP_DIR=~/moonshot/backups
+BASE_DIR=~/moonshot
+MOONSHOT_DIR=moonshot-sit
+
+# Moonshot SIT dir
+SIT_DIR=$BASE_DIR/$MOONSHOT_DIR
+
+# Backup directory and the maximum number of backups
+BACKUP_DIR=$BASE_DIR/backups
 MAX_BACKUPS=5
 
 # Check if the moonshot directory exists
-if [ ! -d ~/moonshot/moonshot ]; then
-  echo "Skip backup: ~/moonshot/moonshot dir does not exist."
+if [ ! -d $SIT_DIR ]; then
+  echo "Skip backup: $SIT_DIR dir does not exist."
   exit 0
 fi
 
@@ -30,5 +36,5 @@ else
   new_backup=$highest_backup
 fi
 
-# Create a new backup by moving the moonshot directory to the backup directory with the new backup number
-mv ~/moonshot/moonshot $BACKUP_DIR/backup_$new_backup
+# Create a new backup by moving the moonshot dir to the backup dir with the new backup number
+mv $SIT_DIR $BACKUP_DIR/backup_$new_backup

aiverify_moonshot-0.4.6/.github/scripts/install_ms_service.sh

@@ -0,0 +1,52 @@
+#!/bin/bash
+
+# Arguments for branches, default to dev_main if not provided.
+MOONSHOT_BRANCH=${1:-dev_main}
+MOONSHOT_DATA_BRANCH=${2:-dev_main}
+MOONSHOT_UI_BRANCH=${3:-dev_main}
+
+BASE_DIR=~/moonshot
+SCRIPTS_DIR=~/scripts
+#BASE_DIR=./moonshot-test
+#SCRIPTS_DIR=./.github/scripts
+
+MOONSHOT_SIT=moonshot-sit
+
+# Install moonshot from GitHub
+
+# Create BASE_DIR if it does not
+if [ ! -d "$BASE_DIR" ]; then
+  mkdir -p "$BASE_DIR"
+fi
+
+cd $BASE_DIR
+
+# Clone the repositories from the specified branches
+echo "Cloning moonshot from branch $MOONSHOT_BRANCH"
+echo "Cloning moonshot-data from branch $MOONSHOT_DATA_BRANCH"
+echo "Cloning moonshot-ui from branch $MOONSHOT_UI_BRANCH"
+git clone --branch $MOONSHOT_BRANCH https://github.com/aiverify-foundation/moonshot.git $MOONSHOT_SIT
+cd $MOONSHOT_SIT
+git clone --branch $MOONSHOT_DATA_BRANCH https://github.com/aiverify-foundation/moonshot-data.git
+git clone --branch $MOONSHOT_UI_BRANCH https://github.com/aiverify-foundation/moonshot-ui.git
+cp $SCRIPTS_DIR/moonshot_env .env
+
+python3 -m venv venv
+source venv/bin/activate
+
+# Install Python dependencies
+pip install -r requirements.txt
+cd moonshot-data
+pip install -r requirements.txt
+
+# Install Node.js dependencies and build the UI
+cd ../moonshot-ui
+rm .env.local
+cp $SCRIPTS_DIR/moonshot_ui_env .env.local
+npm install
+
+# Modify the start script in package.json
+sudo apt-get install -y jq
+jq '.scripts.start = "next start -H 0.0.0.0 -p 3100"' package.json > package.tmp.json && mv package.tmp.json package.json
+
+npm run build

aiverify_moonshot-0.4.6/.github/scripts/moonshot_env

@@ -0,0 +1,28 @@
+# .env for moonshot SIT
+
+# For Data
+ATTACK_MODULES="./moonshot-data/attack-modules"
+BOOKMARKS="./moonshot-data/generated-outputs/bookmarks"
+CONNECTORS="./moonshot-data/connectors"
+CONNECTORS_ENDPOINTS="./moonshot-data/connectors-endpoints"
+CONTEXT_STRATEGY="./moonshot-data/context-strategy"
+COOKBOOKS="./moonshot-data/cookbooks"
+DATABASES="./moonshot-data/generated-outputs/databases"
+DATABASES_MODULES="./moonshot-data/databases-modules"
+DATASETS="./moonshot-data/datasets"
+IO_MODULES="./moonshot-data/io-modules"
+METRICS="./moonshot-data/metrics"
+PROMPT_TEMPLATES="./moonshot-data/prompt-templates"
+RECIPES="./moonshot-data/recipes"
+RESULTS="./moonshot-data/generated-outputs/results"
+RESULTS_MODULES="./moonshot-data/results-modules"
+RUNNERS="./moonshot-data/generated-outputs/runners"
+RUNNERS_MODULES="./moonshot-data/runners-modules"
+TOKENIZERS_PARALLELISM = false
+
+# For Web API
+HOST_ADDRESS=127.0.0.1 # The interface the server will bind to
+HOST_PORT=5100
+
+# URI of the Web UI webhook
+MOONSHOT_UI_CALLBACK_URL=http://localhost:3100/api/v1/benchmarks/status

aiverify_moonshot-0.4.6/.github/scripts/moonshot_test_env

@@ -0,0 +1,7 @@
+ADDITIONAL_PARAMETERS='{
+  "timeout": 300,
+  "allow_retries": true,
+  "num_of_retries": 3,
+  "temperature": 0.5,
+  "model": "gpt-4o"
+}'

aiverify_moonshot-0.4.6/.github/scripts/moonshot_ui_env

@@ -0,0 +1,5 @@
+# .env for moonshot-ui SIT
+
+HOST=127.0.0.1
+PORT=3100
+MOONSHOT_API_URL=http://0.0.0.0:5100

aiverify_moonshot-0.4.6/.github/scripts/run_smoke_test.sh

@@ -0,0 +1,53 @@
+#!/bin/bash
+
+AZURE_OPENAI_API_KEY=$1
+AZURE_OPENAI_ENDPOINT=$2
+TEST_BRANCH_NAME=${3:-main}
+
+BASE_DIR=~/moonshot
+SCRIPTS_DIR=~/scripts
+
+# Export the env variables for smoke test to use
+export AZURE_OPENAI_TOKEN=$AZURE_OPENAI_API_KEY
+export AZURE_OPENAI_URI=$AZURE_OPENAI_ENDPOINT
+export MOONSHOT_URL="http://127.0.0.1"
+export MOONSHOT_PORT_NUMBER="3100"
+export ADDITIONAL_PARAMETERS="{
+  \"timeout\": 300,
+  \"allow_retries\": true,
+  \"num_of_retries\": 3,
+  \"temperature\": 0.5,
+  \"model\": \"gpt-4o\"
+}"
+
+cd $BASE_DIR
+
+if [ -d "moonshot-smoke-testing" ]; then
+  echo "Removing existing moonshot-smoke-testing directory..."
+  rm -rf moonshot-smoke-testing
+fi
+
+# Clone the smoke test repo from the specified branch
+echo "Cloning moonshot-smoke-testing repo from branch $BRANCH_NAME..."
+git clone --branch $TEST_BRANCH_NAME https://github.com/aiverify-foundation/moonshot-smoke-testing.git
+cd moonshot-smoke-testing
+npm ci
+cp $SCRIPTS_DIR/moonshot_test_env .env
+
+# Install Playwright (if needed)
+#sudo npx playwright install-deps
+### If the above didn't work, try the following:
+##sudo apt-get install libatk1.0-0\
+##         libatk-bridge2.0-0\
+##         libxkbcommon0\
+##         libatspi2.0-0\
+##         libxcomposite1\
+##         libxdamage1\
+##         libxfixes3\
+##         libxrandr2\
+##         libgbml
+
+echo "Running smoke test..."
+npx playwright test tests/smoke-test.spec.ts --reporter=list
+
+#echo "Exit code: $?"

aiverify_moonshot-0.4.6/.github/scripts/start_ms_service.sh

@@ -0,0 +1,10 @@
+!/bin/bash
+
+BASE_DIR=~/moonshot
+MOONSHOT_SIT=moonshot-sit
+
+cd $BASE_DIR/$MOONSHOT_SIT
+
+source venv/bin/activate
+python -m moonshot web
+

aiverify_moonshot-0.4.5/.github/workflows/smoke-test.yaml → aiverify_moonshot-0.4.6/.github/workflows/integration-test.yaml

@@ -1,13 +1,12 @@
 # Smoke Test
 
-name: Moonshot Smoke Test
+name: Moonshot Integration Test
 
 on:
-  # Runs on Pull Request
-  pull_request:
-  #  types: [submitted]
-  #  branches:
-  #    - 'main'
+  # Runs on Pull Request Review
+  pull_request_review:
+   branches:
+     - 'main'
 
   # Run this workflow manually from Actions tab
   workflow_dispatch:
@@ -34,15 +33,15 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  smoke-test:
+  integration-test:
 
     runs-on: ubuntu-latest
     timeout-minutes: 20
 
     steps:
 
-    - name: Checkout Moonshot (Pull Request)
-      if: github.event_name == 'pull_request'
+    - name: Checkout Moonshot (Pull Request Review)
+      if: github.event_name == 'pull_request_review'
       uses: actions/checkout@v4
       with:
           repository: ${{ github.event.pull_request.head.repo.full_name }}
@@ -68,8 +67,8 @@ jobs:
         touch .env
         echo "${{ vars.ENVIRONMENT_VARS }}" >> .env
 
-    - name: Checkout Moonshot Data (Pull Request)
-      if: github.event_name == 'pull_request'
+    - name: Checkout Moonshot Data (Pull Request Review)
+      if: github.event_name == 'pull_request_review'
       uses: actions/checkout@v4
       with: 
          repository: aiverify-foundation/moonshot-data
@@ -90,8 +89,8 @@ jobs:
         cd moonshot-data
         pip install -r requirements.txt
 
-    - name: Checkout Moonshot UI (Pull Request)
-      if: github.event_name == 'pull_request'
+    - name: Checkout Moonshot UI (Pull Request Review)
+      if: github.event_name == 'pull_request_review'
       uses: actions/checkout@v4
       with:
         repository: aiverify-foundation/moonshot-ui
@@ -115,19 +114,19 @@ jobs:
         source venv/bin/activate
         python -m moonshot web &
 
-    - name: Checkout Smoke Test 
+    - name: Checkout Integration Test 
       uses: actions/checkout@v4
       with:
-          repository: aiverify-foundation/moonshot-smoke-testing
+          repository: aiverify-foundation/moonshot-integration-testing
           path: moonshot-smoke-testing
 
-    - name: Run Smoke Test
+    - name: Run Integration Test
       env: 
-        URI: ${{ secrets.URI }}
-        TOKEN: ${{ secrets.TOKEN }}
+        AZURE_OPENAI_URI: ${{ secrets.AZURE_OPENAI_URI }}
+        AZURE_OPENAI_TOKEN: ${{ secrets.AZURE_OPENAI_TOKEN }}
         ADDITIONAL_PARAMETERS: ${{ vars.ADDITIONAL_PARAMETERS }}
       run: |
-         cd moonshot-smoke-testing
+         cd moonshot-smoke-testing/ui-integration-testing
          npm ci
          npx playwright install --with-deps
-         URI="$URI" TOKEN="$TOKEN" ADDITIONAL_PARAMETERS="$ADDITIONAL_PARAMETERS" npx playwright test tests/smoke-test.spec.ts
+         AZURE_OPENAI_URI="$AZURE_OPENAI_URI" AZURE_OPENAI_TOKEN="$AZURE_OPENAI_TOKEN" ADDITIONAL_PARAMETERS="$ADDITIONAL_PARAMETERS" npx playwright test

{aiverify_moonshot-0.4.5 → aiverify_moonshot-0.4.6}/.github/workflows/nightly-build.yaml

@@ -6,11 +6,22 @@ on:
   # Run this workflow manually from Actions tab
   workflow_dispatch:
     inputs:
-      branch_to_test:
-        description: 'Branch or tag to build'
+      branch_moonshot:
+        description: 'moonshot branch or tag'
         required: true
         default: 'dev_main'
         type: string
+      branch_moonshot_data:
+        description: 'moonshot-data branch or tag'
+        required: true
+        default: 'dev_main'
+        type: string
+      branch_moonshot_ui:
+        description: 'moonshot-ui branch or tag'
+        required: true
+        default: 'dev_main'
+        type: string
+
 
 # Allow one concurrent deployment
 concurrency:
@@ -67,7 +78,7 @@ jobs:
             --instance-ids "${{ vars.AWS_SIT_INSTANCE_ID }}" \
             --document-name "AWS-RunShellScript" \
             --comment "Install moonshot" \
-            --parameters 'commands=["sudo su - ubuntu -c \". ~/scripts/install_ms_service.sh ${{ inputs.branch_to_test }}\""]' \
+            --parameters 'commands=["sudo su - ubuntu -c \". ~/scripts/install_ms_service.sh ${{ inputs.branch_moonshot }} ${{ inputs.branch_moonshot_data }} ${{ inputs.branch_moonshot_ui }}\""]' \
             --query "Command.CommandId" \
             --output text)
       
@@ -120,7 +131,7 @@ jobs:
             --instance-ids "${{ vars.AWS_SIT_INSTANCE_ID }}" \
             --document-name "AWS-RunShellScript" \
             --comment "Run smoke test" \
-            --parameters 'commands=["sudo su - ubuntu -c \". ~/scripts/run_smoke_test.sh\""]' \
+            --parameters 'commands=["sudo su - ubuntu -c \". ~/scripts/run_smoke_test.sh ${{ secrets.AZURE_OPENAI_TOKEN }} ${{ secrets.AZURE_OPENAI_URI }} \""]' \
             --query "Command.CommandId" \
             --output text)
       
@@ -141,6 +152,7 @@ jobs:
                 --instance-id "${{ vars.AWS_SIT_INSTANCE_ID }}" \
                 --query "StandardOutputContent" \
                 --output text)
+              echo "SMOKE_TEST_STATUS=$output" >> $GITHUB_ENV
               echo "Smoke test output: $output"
               echo "Command status: $status"
               if [ "$status" == "Success" ]; then
@@ -159,4 +171,19 @@ jobs:
           done
       
           echo "Max attempts reached, exiting."
-          exit 1
+          exit 1
+
+      # Send slack notification
+      - name: Send slack notification
+        if: ${{ ! cancelled() }}
+        uses: slackapi/slack-github-action@v1.26.0
+        with:
+          payload: |
+            {
+              "workflow": "${{ github.repository }} | ${{ github.workflow }}",
+              "status": "${{ job.status }}",
+              "details": "${{ env.SMOKE_TEST_STATUS }}",
+              "ref": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+            }
+        env:
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

{aiverify_moonshot-0.4.5 → aiverify_moonshot-0.4.6}/.github/workflows/pre-build-checks.yaml

@@ -116,28 +116,56 @@ jobs:
         if: ${{ ! cancelled() }}
         timeout-minutes: 30
         run: |
+          set +e
           bash ci/run-test.sh
+          source ci/gen_pre_build_summ.sh test
+          test_status=$?
+          source ci/gen_pre_build_summ.sh coverage
+          coverage_status=$?
+          echo "UNIT_TESTS_STATUS=$UNITTEST_SUMMARY" >> $GITHUB_ENV
+          echo "CODE_COVERAGE_STATUS=$COVERAGE_SUMMARY" >> $GITHUB_ENV
+          set -e
+          if [ $test_status -ne 0 ] || [ $coverage_status -ne 0 ]; then
+            exit 1
+          fi
 
       # Code quality analysis (flake8)
       - name: Code quality analysis (flake8)
         id: code_quality
         if: ${{ ! cancelled() }}
         run: |
+          set +e
           bash ci/run-flake8.sh
+          source ci/gen_pre_build_summ.sh lint
+          lint_status=$?
+          echo "CODE_QUALITY_STATUS=$LINT_SUMMARY" >> $GITHUB_ENV
+          set -e
+          exit $lint_status
 
       # pip-audit
       - name: Dependency analysis (vulnerabilities & licenses)
         id: dependency_analysis
         if: ${{ ! cancelled() }}
         run: |
+          set +e
           bash ci/run-pip-audit.sh
-
-      - name: Capture step statuses
-        if: ${{ ! cancelled() }}
-        run: |
-          echo "UNIT_TESTS_STATUS=${{ steps.unit_tests.outcome }}" >> $GITHUB_ENV
-          echo "CODE_QUALITY_STATUS=${{ steps.code_quality.outcome }}" >> $GITHUB_ENV
-          echo "DEPENDENCY_ANALYSIS_STATUS=${{ steps.dependency_analysis.outcome }}" >> $GITHUB_ENV
+          source ci/gen_pre_build_summ.sh dependency
+          dep_status=$?
+          source ci/gen_pre_build_summ.sh license
+          lic_status=$?
+          echo "DEPENDENCY_STATUS=$DEPENDENCY_SUMMARY" >> $GITHUB_ENV
+          echo "LICENSE_STATUS=$LICENSE_SUMMARY" >> $GITHUB_ENV
+          set -e
+          if [ $dep_status -ne 0 ] || [ $lic_status -ne 0 ]; then
+            exit 1
+          fi
+
+#      - name: Capture step statuses
+#        if: ${{ ! cancelled() }}
+#        run: |
+#          echo "UNIT_TESTS_STATUS=${{ steps.unit_tests.outcome }}" >> $GITHUB_ENV
+#          echo "CODE_QUALITY_STATUS=${{ steps.code_quality.outcome }}" >> $GITHUB_ENV
+#          echo "DEPENDENCY_ANALYSIS_STATUS=${{ steps.dependency_analysis.outcome }}" >> $GITHUB_ENV
 
       # Send slack notification
       - name: Send slack notification
@@ -146,9 +174,9 @@ jobs:
         with:
           payload: |
             {
-              "workflow": "${{ github.repository }} - ${{ github.workflow }} - ${{ env.PR_NUM }}",
+              "workflow": "${{ github.repository }} | ${{ github.workflow }} | ${{ env.PR_NUM }}",
               "status": "${{ job.status }}",
-              "details": "Unit Tests: ${{ env.UNIT_TESTS_STATUS }}, Code Quality: ${{ env.CODE_QUALITY_STATUS }}, Dependency Analysis: ${{ env.DEPENDENCY_ANALYSIS_STATUS }}",
+              "details": "${{ env.UNIT_TESTS_STATUS }} | ${{ env.CODE_COVERAGE_STATUS }} | ${{ env.CODE_QUALITY_STATUS }} | ${{ env.DEPENDENCY_STATUS }} | ${{ env.LICENSE_STATUS }}",
               "ref": "${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
             }
         env:

{aiverify_moonshot-0.4.5 → aiverify_moonshot-0.4.6}/.github/workflows/pypi-deployment.yaml

@@ -21,7 +21,7 @@ jobs:
     - name: Set up Python
       uses: actions/setup-python@v5
       with:
-        python-version: "3.x"
+        python-version: "3.11.6"
     - name: Install pypa/build
       run: >-
         python3 -m
@@ -39,13 +39,12 @@ jobs:
   publish-to-pypi:
     name: >-
       Publish Python 🐍 distribution 📦 to PyPI
-    if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
     needs:
     - build
     runs-on: ubuntu-latest
     environment:
       name: pypi
-      url: https://pypi.org/p/<package-name>  # Replace <package-name> with your PyPI project name
+      url: https://pypi.org/p/aiverify-moonshot
     permissions:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
 

aiverify_moonshot-0.4.5/.github/workflows/codeql.yaml → aiverify_moonshot-0.4.6/.github/workflows/sast-codeql.yaml

@@ -9,13 +9,18 @@
 # the `language` matrix defined below to confirm you have the correct set of
 # supported CodeQL languages.
 #
-name: "CodeQL (SAST)"
+name: "SAST - CodeQL"
 
 on:
-  # push:
-  #  branches: [ "main" ]
-  pull_request:
+  push:
     branches: [ "main" ]
+  pull_request:
+    branches: [ "dev_main" ]
+#  # Trigger every Friday at 10:05pm (14:05 UTC)
+#  # cron: min hr day-of-mth mth day-of-week
+#  schedule:
+#    - cron: "5 14 * * 5"
+
   workflow_dispatch:
     inputs:
       branch_to_test:
@@ -23,10 +28,14 @@ on:
         required: true
         default: 'dev_main'
         type: string
-  # Trigger every Friday at 10:05pm (14:05 UTC)
-  # cron: min hr day-of-mth mth day-of-week
-  schedule:
-    - cron: "5 14 * * 5"
+
+  workflow_call:
+    inputs:
+      branch_to_test:
+        description: 'Branch or tag to run test'
+        required: true
+        default: 'dev_main'
+        type: string
 
 jobs:
   analyze:
@@ -64,8 +73,24 @@ jobs:
         # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
-    - name: Checkout repository
+
+    - name: Set branch variable (pull_request)
+      if: github.event_name == 'pull_request'
+      run: |
+        echo "BRANCH=${{ github.event.pull_request.head.ref }}" >> "$GITHUB_ENV"
+        echo "PR_NUM=#${{ github.event.pull_request.number }}" >> "$GITHUB_ENV"
+
+    - name: Set branch variable (workflow_dispatch)
+      if: github.event_name == 'workflow_dispatch'
+      run: |
+        echo "BRANCH=${{ inputs.branch_to_test }}" >> "$GITHUB_ENV"
+        echo "PR_NUM=#0" >> "$GITHUB_ENV"
+
+    - name: Checkout Code
       uses: actions/checkout@v4
+      with:
+        ref: ${{ env.BRANCH }}
+        submodules: recursive
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
@@ -102,8 +127,31 @@ jobs:
       with:
         category: "/language:${{matrix.language}}"
 
-    - name: Capture step statuses
+    - name: Generate CodeQL Analysis Summary
+      id: codeql_summary
       if: ${{ ! cancelled() }}
       run: |
-        echo "CODEQL_ANALYSIS=${{ steps.codeql_analysis.outcome }}" >> $GITHUB_ENV
-        echo "CodeQL Analysis Status: $CODEQL_ANALYSIS"
+        set +e
+        source ci/run-codeql-summ.sh
+        exit_code=$?
+        set -e        
+        echo "CODEQL_SUMMARY=$CODEQL_SUMMARY" >> $GITHUB_ENV
+        exit $exit_code
+      env:
+        GH_TOKEN: ${{ github.token }}
+
+    # Send slack notification
+    - name: Send slack notification
+      if: ${{ ! cancelled() }}
+      uses: slackapi/slack-github-action@v1.26.0
+      with:
+        payload: |
+          {
+            "workflow": "${{ github.repository }} - ${{ github.workflow }} - ${{ env.PR_NUM }}",
+            "status": "SAST: ${{ steps.codeql_summary.outcome }}",
+            "details": "${{ env.CODEQL_SUMMARY }}",
+            "ref": "${{ github.server_url }}/${{ github.repository }}/security/code-scanning"
+          }
+      env:
+        SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+        

{aiverify_moonshot-0.4.5 → aiverify_moonshot-0.4.6}/.github/workflows/sca-scan.yaml

@@ -27,7 +27,7 @@ jobs:
     steps:
 
     - name: Checkout Code (Pull_Request)
-      # if: github.event_name == 'pull_request'
+      if: github.event_name == 'pull_request'
       uses: actions/checkout@v3
       with:
           ref: ${{ github.event.pull_request.head.ref }}
@@ -41,7 +41,7 @@ jobs:
           ref: ${{ inputs.branch_to_test }}
 
     - name: Set Branch Variable (Pull_Request)
-      # if: github.event_name == 'pull_request'
+      if: github.event_name == 'pull_request'
       run: |
           echo "BRANCH=branch" >> "$GITHUB_ENV"
 
@@ -55,7 +55,17 @@ jobs:
       with:
         python-version: "3.11"
 
-    - name: Install & Scan MOONSHOT
+    - name: Install & Scan MOONSHOT (Pull_Request)
+      if: github.event_name == 'pull_request'
+      run: |
+          python -m venv venv
+          source venv/bin/activate
+          pip install -r requirements.txt
+          bash <(curl -s -L https://detect.synopsys.com/detect9.sh) --blackduck.url=https://blackduck.aipo-imda.net/ --blackduck.api.token=${{ secrets.BLACKDUCK_TOKEN }} --detect.detector.search.depth=10 --detect.project.name=aiverify-moonshot --detect.project.version.name=$BRANCH --detect.source.path=. --detect.code.location.name="aiverify-moonshot_$BRANCH" --detect.excluded.directories=/tests --blackduck.trust.cert=true --detect.excluded.detector.types=POETRY --detect.blackduck.scan.mode=RAPID
+          cd ../
+
+    - name: Install & Scan MOONSHOT (Workflow_Dispatch)
+      if: github.event_name == 'workflow_dispatch'
       run: |
           python -m venv venv
           source venv/bin/activate