Skip to content

Commit 6646839

Browse files
authored
bypass pip-audit for pip (#108)
* Update typing-inspection version and adjust pip-audit command to ignore known vulnerability * update lock file
1 parent 5e4160a commit 6646839

File tree

2 files changed

+20
-18
lines changed

2 files changed

+20
-18
lines changed

pixi.lock

Lines changed: 16 additions & 17 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

pyproject.toml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -207,7 +207,9 @@ conda-publish = { cmd = "anaconda upload *.conda", description = "Publish the .c
207207
"conda-build",
208208
] }
209209
# Misc
210-
audit-deps = { cmd = "pip-audit --local -s osv", description = "Audit the package dependencies for vulnerabilities" }
210+
# As of 10-01-2025, all pip version are failing pip-autid, so we ignore the known issue GHSA-4xh5-x5gv-qwph for now
211+
audit-deps = { cmd = "pip-audit --ignore-vuln GHSA-4xh5-x5gv-qwph --local -s osv", description = "Audit the package dependencies for vulnerabilities" }
212+
# Cleaning
211213
clean = { cmd = 'rm -rf .pytest_cache .ruff_cache **/*.egg-info **/dist **/__pycache__', description = "Clean up various caches and build artifacts" }
212214
clean-conda = { cmd = "rm -f *.conda", description = "Clean the local .conda build artifacts" }
213215
clean-docs = { cmd = "rm -rf docs/_build", description = "Clean up documentation build artifacts" }
@@ -218,6 +220,7 @@ clean-all = { description = "Clean all artifacts", depends-on = [
218220
"clean-docs",
219221
"clean-pypi",
220222
] }
223+
# workaround for dynamic versioning
221224
sync-version = { cmd = 'version=$(python -m versioningit); toml set tool.pixi.package.version "$version" --toml-path pyproject.toml', description = "Sync pyproject.toml version with Git version" }
222225
backup-toml = { cmd = "cp pyproject.toml pyproject.toml.bak", description = "Backup the pyproject.toml file" }
223226
reset-toml = { cmd = "cp pyproject.toml.bak pyproject.toml; rm pyproject.toml.bak", description = "Reset the pyproject.toml file to the original state" }

0 commit comments

Comments
 (0)