Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
We have an internal tool where we call checkov from a python program and for that we have to add checkov as one of the dependency in our pyproject.toml. When we add the latest 3.2.128 version, it is looking for a subdependency pyston. We basically build this tool as a docker container. When I build this container in local mac, it is working properly. When, I try and build this on a CICD pipelines, it tries to build for --platform linux/amd64 it fails with below error.
Do we really need pyston? I manually remove it from poetry.lock and build the image which is working just fine. anyone facing the same issue? Please do let me know.
#13 5.487 RuntimeError
#13 5.487
#13 5.487 Unable to find installation candidates for pyston (2.3.5)
#13 5.488
#13 5.488 at ~/.local/share/pypoetry/venv/lib/python3.9/site-packages/poetry/installation/chooser.py:74 in choose_for
#13 5.501 70│
#13 5.501 71│ links.append(link)
#13 5.501 72│
#13 5.502 73│ if not links:
#13 5.502 → 74│ raise RuntimeError(f"Unable to find installation candidates for {package}")
#13 5.502 75│
#13 5.503 76│ # Get the best link
#13 5.503 77│ chosen = max(links, key=lambda link: self._sort_key(package, link))
#13 5.503 78│
#13 5.504
#13 5.504 Cannot install pyston.
Describe the issue
We have an internal tool where we call checkov from a python program and for that we have to add checkov as one of the dependency in our pyproject.toml. When we add the latest
3.2.128
version, it is looking for a subdependencypyston
. We basically build this tool as a docker container. When I build this container in local mac, it is working properly. When, I try and build this on a CICD pipelines, it tries to build for--platform linux/amd64
it fails with below error.Do we really need pyston? I manually remove it from poetry.lock and build the image which is working just fine. anyone facing the same issue? Please do let me know.