mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.
https://mandiant.github.io/capa/
Apache License 2.0
4.87k stars 561 forks source link

add lint/check to avoid missing entries in requirements.txt/pyproject.toml #2362

Open mr-tz opened 2 months ago

mr-tz commented 2 months ago

as encountered in https://github.com/mandiant/capa/issues/2359

williballenthin commented 2 months ago

in CI we install deps from requirements.txt and then install from pyproject. but the second step should be a no-op, except to install capa. so maybe we can inspect the pip output to assert there are no extra packages being installed. or we could do pip freeze before/after and ensure the diff is a single line.

these aren't lints that we can run standalone but would help us catch things along the way