cdklabs / cdklabs/cdk-cicd-wrapper
[BUG] Misleading ERROR message for pip-audit scan
- Dominant language
- TypeScript
- Stars
- 34
- Forks
- 9
- Avg merge
- 2h 57m
- Merged PRs (30d)
- 48
Description
### Describe the bug
I have a Pipfile that installs a package from Github. When I run the audit:deps:python scan, it returns an error saying that this requirement does not contain a hash, even though the scan itself exited with code 0.

### Expected Behavior
This should not be shown as an error as it could be misleading.
### Current Behavior
Even though the scan itself is successful, this error message is still printed.
### Reproduction Steps
**Pipfile**
[[source]]
url = "https://pypi.org/simple"
verify_ssl = true
name = "pypi"
[packages]
chronos = { git = "https://github.com/amazon-science/chronos-forecasting.git", ref = "main" }
[dev-packages]
[requires]
python_version = "3.11"
### Possible Solution
_No response_
### Additional Information/Context
_No response_
### CDK CI/CD Wrapper version used
0.2.3
### Environment details (OS name and version, etc.)
macOS 14.3.1
Contributor guide
Assessment
This issue has not been assessed yet.