pyupio / safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
https://safetycli.com/product/safety-cli
MIT License
1.66k stars 141 forks source link

Specifiers support the new PyUp JSON database schema 2.0 version #456

Closed yeisonvargasf closed 1 year ago

yeisonvargasf commented 1 year ago

Next Safety version will start to use the new JSON schema for the PyUp vulnerability database, this PR adds support for that and add a new flag and UI related to specifiers in requirement files.

codecov[bot] commented 1 year ago

Codecov Report

Base: 76.82% // Head: 78.05% // Increases project coverage by +1.22% :tada:

Coverage data is based on head (1fe076c) compared to base (0ed7f53). Patch coverage: 78.28% of modified lines in pull request are covered.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## develop #456 +/- ## =========================================== + Coverage 76.82% 78.05% +1.22% =========================================== Files 26 28 +2 Lines 3526 3796 +270 =========================================== + Hits 2709 2963 +254 - Misses 817 833 +16 ``` | [Impacted Files](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio) | Coverage Δ | | |---|---|---| | [safety/alerts/github.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2FsZXJ0cy9naXRodWIucHk=) | `12.38% <5.12%> (+0.38%)` | :arrow_up: | | [safety/alerts/utils.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2FsZXJ0cy91dGlscy5weQ==) | `26.80% <18.75%> (-0.47%)` | :arrow_down: | | [safety/alerts/\_\_init\_\_.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2FsZXJ0cy9fX2luaXRfXy5weQ==) | `63.88% <40.00%> (-3.86%)` | :arrow_down: | | [safety/safety.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L3NhZmV0eS5weQ==) | `79.17% <71.97%> (-2.20%)` | :arrow_down: | | [safety/formatters/screen.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2Zvcm1hdHRlcnMvc2NyZWVuLnB5) | `88.33% <76.92%> (-3.67%)` | :arrow_down: | | [safety/util.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L3V0aWwucHk=) | `84.26% <83.33%> (-0.02%)` | :arrow_down: | | [safety/output\_utils.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L291dHB1dF91dGlscy5weQ==) | `89.80% <87.14%> (+1.67%)` | :arrow_up: | | [safety/formatters/json.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2Zvcm1hdHRlcnMvanNvbi5weQ==) | `95.38% <93.75%> (+1.63%)` | :arrow_up: | | [safety/cli.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2NsaS5weQ==) | `87.85% <95.45%> (-0.12%)` | :arrow_down: | | [safety/formatters/schemas/zero\_five.py](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio#diff-c2FmZXR5L2Zvcm1hdHRlcnMvc2NoZW1hcy96ZXJvX2ZpdmUucHk=) | `96.42% <96.42%> (ø)` | | | ... and [17 more](https://codecov.io/gh/pyupio/safety/pull/456?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio) | | Help us with your feedback. Take ten seconds to tell us [how you rate us](https://about.codecov.io/nps?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio). Have a feature suggestion? [Share it here.](https://app.codecov.io/gh/feedback/?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=pyupio)

:umbrella: View full report at Codecov.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.