diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index 8cbbda589..57e11688e 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -73,7 +73,7 @@ jobs: - uses: ./.github/actions/setup-project - uses: trailofbits/gh-action-pip-audit@v1.0.0 with: - inputs: requirements.txt requirements_for_test.txt + inputs: requirements.txt ignore-vulns: PYSEC-2022-237 static-scan: diff --git a/.github/workflows/daily_checks.yml b/.github/workflows/daily_checks.yml index 3846c3a79..06dd0bc19 100644 --- a/.github/workflows/daily_checks.yml +++ b/.github/workflows/daily_checks.yml @@ -40,7 +40,7 @@ jobs: - uses: ./.github/actions/setup-project - uses: trailofbits/gh-action-pip-audit@v1.0.0 with: - inputs: requirements.txt requirements_for_test.txt + inputs: requirements.txt ignore-vulns: PYSEC-2022-237 static-scan: diff --git a/Makefile b/Makefile index 18caff76d..701ae3380 100644 --- a/Makefile +++ b/Makefile @@ -75,7 +75,8 @@ freeze-requirements: ## Pin all requirements including sub dependencies into req .PHONY: audit audit: pip install --upgrade pip-audit - pip-audit -r requirements.txt -r requirements_for_test.txt -l --ignore-vuln PYSEC-2022-237 + pip-audit -r requirements.txt -l --ignore-vuln PYSEC-2022-237 + -pip-audit -r requirements_for_test.txt -l .PHONY: static-scan static-scan: