darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2026-02-03 01:41:05 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #160 from GSA/pip-audit-mitigation

Browse Source 
Pip audit mitigation
This commit is contained in:
Ryan Ahearn
2023-01-03 10:06:41 -05:00
committed by GitHub
parent 812499bfa3 7e02e6b33d
commit c5f15a81de
4 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/checks.yml vendored
View File

@@ -60,7 +60,7 @@ jobs:
- uses: ./.github/actions/setup-project - uses: ./.github/actions/setup-project
- name: Create requirements.txt - name: Create requirements.txt
run: pipenv requirements > requirements.txt run: pipenv requirements > requirements.txt
- uses: trailofbits/gh-action-pip-audit@v1.0.0 - uses: pypa/gh-action-pip-audit@v1.0.4
with: with:
inputs: requirements.txt inputs: requirements.txt
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237

2
.github/workflows/daily_checks.yml vendored
View File

@@ -29,7 +29,7 @@ jobs:
- uses: ./.github/actions/setup-project - uses: ./.github/actions/setup-project
- name: Create requirements.txt - name: Create requirements.txt
run: pipenv requirements > requirements.txt run: pipenv requirements > requirements.txt
- uses: trailofbits/gh-action-pip-audit@v1.0.0 - uses: pypa/gh-action-pip-audit@v1.0.4
with: with:
inputs: requirements.txt inputs: requirements.txt
ignore-vulns: PYSEC-2022-237 ignore-vulns: PYSEC-2022-237

4
Makefile
View File

@@ -66,8 +66,8 @@ freeze-requirements: ## Pin all requirements including sub dependencies into req
audit: audit:
pipenv requirements > requirements.txt pipenv requirements > requirements.txt
pipenv requirements --dev > requirements_for_test.txt pipenv requirements --dev > requirements_for_test.txt
pipenv run pip-audit -r requirements.txt -l --ignore-vuln PYSEC-2022-237 pipenv run pip-audit -r requirements.txt --ignore-vuln PYSEC-2022-237
-pipenv run pip-audit -r requirements_for_test.txt -l -pipenv run pip-audit -r requirements_for_test.txt
.PHONY: static-scan .PHONY: static-scan
static-scan: static-scan:

1
docker-compose.devcontainer.yml
View File

@@ -48,7 +48,6 @@ services:
- redis - redis
links: links:
- db - db
restart: always
worker: worker:
container_name: worker container_name: worker
image: dev-notification-api image: dev-notification-api