search

microsoft / component-detection

Scans your project to determine what components you use
MIT License
396 stars 81 forks source link

Add ability to skip pipreport if pip_index_url is not present #1188

Closed pauld-msft closed 13 hours ago

pauld-msft commented 4 days ago

Adds env var that can be set to configure pipreport to skip the report rather than reach out to a potentially vulnerable source, such as pypi.org

codecov[bot] commented 4 days ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 76.2%. Comparing base (52daf67) to head (bba7d5c).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #1188 +/- ## ===================================== Coverage 76.2% 76.2% ===================================== Files 257 257 Lines 11469 11482 +13 Branches 1152 1153 +1 ===================================== + Hits 8741 8754 +13 Misses 2396 2396 Partials 332 332 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.