mirror of
https://github.com/GSA/notifications-api.git
synced 2026-02-04 02:11:11 -05:00
Only run pip-audit on runtime dependencies in CI
This commit is contained in:
3
Makefile
3
Makefile
@@ -75,7 +75,8 @@ freeze-requirements: ## Pin all requirements including sub dependencies into req
|
||||
.PHONY: audit
|
||||
audit:
|
||||
pip install --upgrade pip-audit
|
||||
pip-audit -r requirements.txt -r requirements_for_test.txt -l --ignore-vuln PYSEC-2022-237
|
||||
pip-audit -r requirements.txt -l --ignore-vuln PYSEC-2022-237
|
||||
-pip-audit -r requirements_for_test.txt -l
|
||||
|
||||
.PHONY: static-scan
|
||||
static-scan:
|
||||
|
||||
Reference in New Issue
Block a user