Closed dualfade closed 3 years ago
We have to pin a particular version of semgrep since the internal APIs of semgrep is under development and is bound to changes. libsast helpers works only with a particular version of semgrep and hence pinning is required. A loose requiment will break things.
Got it. Will hack in place so it works with semgrep 0.35.0. Thank you.
Closing this.
Would it be possible to update this from -- 5:semgrep==0.34.0
to -- 5:semgrep>=0.34.0
?? I am trying to include njsscan in the BlackArch repos and this is failing my initial build.
---- snip ---- File "/usr/lib/python3.9/site-packages/pkg_resources/init.py", line 3251, in _initialize_master_working_set working_set = WorkingSet._build_master() File "/usr/lib/python3.9/site-packages/pkg_resources/init.py", line 569, in _build_master return cls._build_from_requirements(requires) File "/usr/lib/python3.9/site-packages/pkg_resources/init.py", line 582, in _build_from_requirements dists = ws.resolve(reqs, Environment()) File "/usr/lib/python3.9/site-packages/pkg_resources/init.py", line 770, in resolve raise DistributionNotFound(req, requirers) pkg_resources.DistributionNotFound: The 'semgrep==0.34.0' distribution was not found and is required by libsast
Update: our install includes semgrep 0.35.0
Much appreciated. ~!>D