Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove ignored vulnerability in pip-audit pre-commit hook #380

Open
jsf9k opened this issue Nov 18, 2024 · 0 comments
Open

Remove ignored vulnerability in pip-audit pre-commit hook #380

jsf9k opened this issue Nov 18, 2024 · 0 comments

Comments

@jsf9k
Copy link
Member

jsf9k commented Nov 18, 2024 •
edited
Loading

💡 Summary

In #376 we added commit b2020a8 to ignore a particular ansible-core vulnerability because there is currently no recent version of ansible-core that does not have it. This ignored vulnerability should be removed once that becomes possible.

Motivation and context

Vulnerabilities should not be ignored when they need not be.
jsf9k added a commit that referenced this issue Nov 18, 2024
@jsf9k
Ignore a particular ansible-core vulnerability
b2020a8 
This is being done only temporarily, and only because there is no
recent version of ansible-core that does not exhibit the
vulnerability.  Without this change we get a failure from the
pip-audit pre-commit hook that we cannot do anything about.

See #380 for more details.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@jsf9k