test: remove "ignore-vuln" from pip-audit tests
the vulnerability was fixed.
This commit is contained in:
@@ -23,9 +23,8 @@ def test_pip_audit_no_vulnerabilities():
|
|||||||
Run pip-audit to check for known security vulnerabilities.
|
Run pip-audit to check for known security vulnerabilities.
|
||||||
|
|
||||||
This test will fail if any vulnerabilities are detected in the installed packages.
|
This test will fail if any vulnerabilities are detected in the installed packages.
|
||||||
|
Note: Document ignores here if vulnerabilities are acceptable.
|
||||||
|
|
||||||
Note: CVE-2025-53000 (nbconvert Windows vulnerability) is ignored as it only affects
|
|
||||||
Windows platforms and is a known acceptable risk for this project.
|
|
||||||
"""
|
"""
|
||||||
# Get the project root directory
|
# Get the project root directory
|
||||||
project_root = Path(__file__).parent.parent
|
project_root = Path(__file__).parent.parent
|
||||||
@@ -35,8 +34,8 @@ def test_pip_audit_no_vulnerabilities():
|
|||||||
"pip_audit",
|
"pip_audit",
|
||||||
# "--format=json",
|
# "--format=json",
|
||||||
"--progress-spinner=off",
|
"--progress-spinner=off",
|
||||||
"--ignore-vuln",
|
# "--ignore-vuln",
|
||||||
"CVE-2025-53000",
|
# "CVE-2025-53000",
|
||||||
"--skip-editable",
|
"--skip-editable",
|
||||||
]
|
]
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user