shotgunsoftware / tk-framework-adobe

Foundation Tech for all Adobe Integrations
https://developer.shotgridsoftware.com/tk-framework-adobe/
Other
10 stars 8 forks source link

SG-20243: security fix #17

Closed jfboismenu closed 3 years ago

jfboismenu commented 3 years ago

This branch introduces a new script called update_python_packages.py that allows to repackage the zip file at the root of the repository. It uses pip and the requirements.txt to figure out what needs to be installed and uses pip freeze to dump the exact list of all python packages that were installed. This allows us to have the high level and low level view of what packages were installed and allows Github to notify us if we have unsecure dependencies.

Once all dependencies have been downloaded locally to a temporary folder, they are zipped up inside pkgs.zip.