search

pypa / pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
https://pypi.org/project/pip-audit/
Apache License 2.0
964 stars 63 forks source link

workflows/release: cleanup #789

Closed woodruffw closed 3 months ago

woodruffw commented 3 months ago

Removes two unnecessary dependencies and disables the caching settings (which have only a marginal effect since our build setup is tiny, but represents a cache poisoning risk).

Also deduplicates the python-version setting by having setup-python pull it from pyproject.toml instead.