microsoft / microsoft/component-detection
Allow internal artifact feed configuration in pip detector
Open
@cobya is already working on this.
Since May 23, 2024.
detector:pip
status:in-progress
type:bug
- Dominant language
- C#
- Stars
- 553
- Forks
- 135
- Avg merge
- 20h 58m
- Merged PRs (30d)
- 6
Description
Today, the Pip detector automatically pulls from PyPI for latest version + dependency tree.
https://github.com/microsoft/component-detection/blob/cf622c795006400d2644fc176e5e524032f043c1/docs/detectors/pip.md?plain=1#L25
We should use users' internal feeds, if configured, rather than making HTTP calls to PyPI by default.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.