Skip to content

Commit

Permalink
chore: ignoring aiohttp vulnerability
Browse files Browse the repository at this point in the history
  • Loading branch information
negar-abbasi committed Nov 8, 2023
1 parent ce9fd61 commit 8293f99
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion .github/workflows/check-python.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,8 @@ jobs:
- name: Audit with pip-audit
run: |
# audit non dev dependencies, no exclusions
poetry export --without=dev > requirements.txt && poetry run pip-audit -r requirements.txt
# This is a temporary fix for PYSEC-2022-43059 as the vulnerability is withdrawn. See https://github.com/pypa/advisory-database/pull/169
poetry export --without=dev > requirements.txt && poetry run pip-audit -r requirements.txt --ignore-vuln "PYSEC-2022-43059"
# audit all dependencies, with exclusions.
# If a vulnerability is found in a dev dependency without an available fix,
Expand Down

0 comments on commit 8293f99

Please sign in to comment.