cdklabs / cdk-cicd-wrapper

This repository contains the infrastructure as code to wrap your AWS CDK project with CI/CD around it.
https://cdklabs.github.io/cdk-cicd-wrapper/
Apache License 2.0
21 stars 5 forks source link

[BUG] Misleading ERROR message for pip-audit scan #80

Open ceciliss opened 1 month ago

ceciliss commented 1 month ago

Describe the bug

I have a Pipfile that installs a package from Github. When I run the audit:deps:python scan, it returns an error saying that this requirement does not contain a hash, even though the scan itself exited with code 0.

Screenshot 2024-07-23 at 20 04 26

Expected Behavior

This should not be shown as an error as it could be misleading.

Current Behavior

Even though the scan itself is successful, this error message is still printed.

Reproduction Steps

Pipfile [[source]] url = "https://pypi.org/simple" verify_ssl = true name = "pypi"

[packages] chronos = { git = "https://github.com/amazon-science/chronos-forecasting.git", ref = "main" }

[dev-packages]

[requires] python_version = "3.11"

Possible Solution

No response

Additional Information/Context

No response

CDK CI/CD Wrapper version used

0.2.3

Environment details (OS name and version, etc.)

macOS 14.3.1