Skip to content

Commit 331a8cb

Browse files
authored
chore(deps): ignore GHSA-pr76-5cm5-w9cj until PyDriller updates GitPython (#410)
See ishepard/pydriller#280 Signed-off-by: behnazh-w <[email protected]>
1 parent 34719d5 commit 331a8cb

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

Makefile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -225,12 +225,14 @@ requirements.txt: pyproject.toml
225225
# editable mode (like the one in development here) because they may not have
226226
# a PyPI entry; also print out CVE description and potential fixes if audit
227227
# found an issue.
228+
# TODO: do not ignore GHSA-pr76-5cm5-w9cj once the patch is out.
229+
# See: https://github.com/ishepard/pydriller/issues/280
228230
.PHONY: audit
229231
audit:
230232
if ! $$(python -c "import pip_audit" &> /dev/null); then \
231233
echo "No package pip_audit installed, upgrade your environment!" && exit 1; \
232234
fi;
233-
python -m pip_audit --skip-editable --desc on --fix --dry-run
235+
python -m pip_audit --skip-editable --desc on --fix --dry-run --ignore-vuln GHSA-pr76-5cm5-w9cj
234236

235237
# Run some or all checks over the package code base.
236238
.PHONY: check check-code check-bandit check-flake8 check-lint check-mypy check-go check-actionlint

0 commit comments

Comments
 (0)