From fd858b79af34d5edfc8f957c1ab7efdcd33a74f1 Mon Sep 17 00:00:00 2001 From: Matthias Date: Wed, 25 Mar 2026 10:58:18 +0100 Subject: [PATCH] test: remove "ignore-vuln" from pip-audit tests the vulnerability was fixed. --- tests/test_pip_audit.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/tests/test_pip_audit.py b/tests/test_pip_audit.py index 7c135c2c9..d52643342 100644 --- a/tests/test_pip_audit.py +++ b/tests/test_pip_audit.py @@ -23,9 +23,8 @@ def test_pip_audit_no_vulnerabilities(): Run pip-audit to check for known security vulnerabilities. This test will fail if any vulnerabilities are detected in the installed packages. + Note: Document ignores here if vulnerabilities are acceptable. - Note: CVE-2025-53000 (nbconvert Windows vulnerability) is ignored as it only affects - Windows platforms and is a known acceptable risk for this project. """ # Get the project root directory project_root = Path(__file__).parent.parent @@ -35,8 +34,8 @@ def test_pip_audit_no_vulnerabilities(): "pip_audit", # "--format=json", "--progress-spinner=off", - "--ignore-vuln", - "CVE-2025-53000", + # "--ignore-vuln", + # "CVE-2025-53000", "--skip-editable", ]