cdklabs / cdklabs/cdk-cicd-wrapper

[BUG] Misleading ERROR message for pip-audit scan

Open
#80 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
TypeScript
Stars
34
Forks
9
Avg merge
2h 57m
Merged PRs (30d)
48

Description

### Describe the bug

I have a Pipfile that installs a package from Github. When I run the audit:deps:python scan, it returns an error saying that this requirement does not contain a hash, even though the scan itself exited with code 0.

![Screenshot 2024-07-23 at 20 04 26](https://github.com/user-attachments/assets/56cca415-27b3-4dbc-89d9-88e5acdabaee)

### Expected Behavior

This should not be shown as an error as it could be misleading.

### Current Behavior

Even though the scan itself is successful, this error message is still printed.

### Reproduction Steps

**Pipfile**
[[source]]
url = "https://pypi.org/simple"
verify_ssl = true
name = "pypi"

[packages]
chronos = { git = "https://github.com/amazon-science/chronos-forecasting.git", ref = "main" }

[dev-packages]

[requires]
python_version = "3.11"

### Possible Solution

_No response_

### Additional Information/Context

_No response_

### CDK CI/CD Wrapper version used

0.2.3

### Environment details (OS name and version, etc.)

macOS 14.3.1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.