search

pypa / get-pip

Helper scripts to install pip, in a Python installation that doesn't have it.
https://bootstrap.pypa.io/pip/
MIT License
740 stars 293 forks source link

Whitelisting URLs required? #125

Closed lppier closed 2 years ago

lppier commented 3 years ago

Hi, I'm trying to get get-pip to work in order to resolve a python vulnerability in my containers. The urls I've whitelisted are as follows : https://bootstrap.pypa.io/
https://pypi.org/simple/pip/

I also recently realised that the following url is required to be whitelisted. https://files.pythonhosted.org/

Are there any others that I should know of?

Thank you.

xavfernandez commented 3 years ago

No, I think that's the only 3 needed.