bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
6.71k stars 1.08k forks source link

pyston dependency Installation failing when trying to install dependencies using poetry in a amd docker container #6412

Open ppapishe opened 3 weeks ago

ppapishe commented 3 weeks ago

Describe the issue

We have an internal tool where we call checkov from a python program and for that we have to add checkov as one of the dependency in our pyproject.toml. When we add the latest 3.2.128 version, it is looking for a subdependency pyston. We basically build this tool as a docker container. When I build this container in local mac, it is working properly. When, I try and build this on a CICD pipelines, it tries to build for --platform linux/amd64 it fails with below error.

Do we really need pyston? I manually remove it from poetry.lock and build the image which is working just fine. anyone facing the same issue? Please do let me know.

#13 5.487   RuntimeError
#13 5.487 
#13 5.487   Unable to find installation candidates for pyston (2.3.5)
#13 5.488 
#13 5.488   at ~/.local/share/pypoetry/venv/lib/python3.9/site-packages/poetry/installation/chooser.py:74 in choose_for
#13 5.501        70│ 
#13 5.501        71│             links.append(link)
#13 5.501        72│ 
#13 5.502        73│         if not links:
#13 5.502     →  74│             raise RuntimeError(f"Unable to find installation candidates for {package}")
#13 5.502        75│ 
#13 5.503        76│         # Get the best link
#13 5.503        77│         chosen = max(links, key=lambda link: self._sort_key(package, link))
#13 5.503        78│ 
#13 5.504 
#13 5.504 Cannot install pyston.
gruebel commented 3 weeks ago

Hey @ppapishe just use Python 3.11 and it won't be installed.