Mirroristas/planetmint
2
0
Fork 0
mirror of https://github.com/planetmint/planetmint.git synced 2026-02-20 18:46:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix dependencies (locked) and the audit (#400)

Browse Source 
* fix dependencies (locked) and the audit

Signed-off-by: Jürgen Eckel <juergen@riddleandcode.com>

* added pip-audit to poetry to avoid inconsistent environments

Signed-off-by: Jürgen Eckel <juergen@riddleandcode.com>

---------

Signed-off-by: Jürgen Eckel <juergen@riddleandcode.com>
This commit is contained in:
Jürgen Eckel
2023-06-14 09:30:03 +02:00
committed by GitHub
parent 0d947a4083
commit 4bf1af6f06
4 changed files with 416 additions and 248 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.github/workflows/CI.yml vendored
View File

@@ -43,9 +43,6 @@ jobs:
with:
python-version: 3.9
- name: Install pip-audit
run: pip install --upgrade pip pip-audit
- name: Setup poetry
uses: Gr1N/setup-poetry@v8
@@ -56,7 +53,7 @@ jobs:
run: poetry run pip freeze > requirements.txt
- name: Audit dependencies
run: poetry run pip-audit --ignore-vuln PYSEC-2022-203 --ignore-vuln PYSEC-2023-58 --ignore-vuln PYSEC-2023-57 --ignore-vuln GHSA-m2qf-hxjv-5gpq --ignore-vuln PYSEC-2022-4301 --ignore-vuln PYSEC-2022-43012
run: poetry run pip-audit --ignore-vuln PYSEC-2022-203 --ignore-vuln PYSEC-2023-58 --ignore-vuln PYSEC-2023-57 --ignore-vuln PYSEC-2023-62
test:
needs: lint

5
.github/workflows/audit.yml vendored
View File

@@ -21,9 +21,6 @@ jobs:
with:
python-version: 3.9
- name: Install pip-audit
run: pip install --upgrade pip
- name: Setup poetry
uses: Gr1N/setup-poetry@v8
@@ -34,4 +31,4 @@ jobs:
run: poetry run pip freeze > requirements.txt
- name: Audit dependencies
run: poetry run pip-audit --ignore-vuln PYSEC-2022-203 --ignore-vuln PYSEC-2023-58 --ignore-vuln PYSEC-2023-57 --ignore-vuln GHSA-m2qf-hxjv-5gpq --ignore-vuln PYSEC-2022-4301
run: poetry run pip-audit --ignore-vuln PYSEC-2022-203 --ignore-vuln PYSEC-2023-58 --ignore-vuln PYSEC-2023-57 --ignore-vuln PYSEC-2023-62