intel / cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
https://cve-bin-tool.readthedocs.io/en/latest/
GNU General Public License v3.0
1.21k stars 460 forks source link

ci: change other workflows to use python 3.11 #3494

Closed terriko closed 12 months ago

terriko commented 12 months ago

https://github.com/intel/cve-bin-tool/blob/main/.github/workflows/formatting.yml

This is basically the same issue as in #3487. We're getting errors from the a few jobs job that look suspiciously like the errors we saw when trying out python 3.12. Since we're not likely to support 3.12 for at least a few weeks (I'm busy with hacktoberfest and prepping for our next release), I'd like to switch those workflows to use python 3.11 explicitly so they don't cause problems.

This should be a set of one-line changes (change 3.x in .github/workflows/*.yml to be 3.11) so I'm going to mark this as a good first issue and suitable for hacktoberfest folk who are still looking to get their last commits in.

A quick grep -ri "3.x" .github/* yields the following:

.github/workflows/formatting.yml:          python-version: '3.x'
.github/workflows/linting.yml:          python-version: '3.x'
.github/workflows/testing.yml:          python-version: '3.x'
.github/workflows/update-js-dependencies.yml:          python-version: '3.x'
.github/workflows/update-pre-commit.yml:          python-version: '3.x'

So there should be 5 files to change in total.

Short tips for new contributors:

Claiming issues:

Virtual4087 commented 12 months ago

I would like to work on this

terriko commented 12 months ago

@Virtual4087 I've assigned you. Have fun! It should be pretty simple to do.