diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index 9022d79a0..0e9535f73 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -76,7 +76,6 @@ jobs: - uses: pypa/gh-action-pip-audit@v1.0.4 with: inputs: requirements.txt - ignore-vulns: GHSA-8fww-64cx-x8p5 static-scan: runs-on: ubuntu-latest diff --git a/.github/workflows/daily_checks.yml b/.github/workflows/daily_checks.yml index 04be11aea..beac8fbb7 100644 --- a/.github/workflows/daily_checks.yml +++ b/.github/workflows/daily_checks.yml @@ -30,7 +30,6 @@ jobs: - uses: pypa/gh-action-pip-audit@v1.0.4 with: inputs: requirements.txt - ignore-vulns: GHSA-8fww-64cx-x8p5 static-scan: runs-on: ubuntu-latest diff --git a/Makefile b/Makefile index d65bbad0d..e6c70bc05 100644 --- a/Makefile +++ b/Makefile @@ -67,7 +67,7 @@ freeze-requirements: ## Pin all requirements including sub dependencies into req audit: pipenv requirements > requirements.txt pipenv requirements --dev > requirements_for_test.txt - pipenv run pip-audit -r requirements.txt --ignore-vuln GHSA-8fww-64cx-x8p5 + pipenv run pip-audit -r requirements.txt -pipenv run pip-audit -r requirements_for_test.txt .PHONY: static-scan