sonatype-nexus-community / jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
https://jake.readthedocs.io/
Apache License 2.0
114 stars 24 forks source link

Inline targets help changes #58

Closed ButterB0wl closed 3 years ago

ButterB0wl commented 3 years ago

added example to readme of site-packages target list generation in-line to the flag argument

I figured out a simpler way to specify site packages targets as shown below without having to save the output to an env var and pass it in:

artie@ArtieSonaDell:~$ source .venv/bin/activate
(.venv) artie@ArtieSonaDell:~$ jake ddt -t "`python -c "import site; print(site.getsitepackages())"`"
                   ___           ___           ___
       ___        /  /\         /  /\         /  /\
      /__/\      /  /::\       /  /:/        /  /::\
      \__\:\    /  /:/\:\     /  /:/        /  /:/\:\
  ___ /  /::\  /  /::\ \:\   /  /::\____   /  /::\ \:\
 /__/\  /:/\/ /__/:/\:\_\:\ /__/:/\:::::\ /__/:/\:\ \:\
 \  \:\/:/~~  \__\/  \:\/:/ \__\/~|:|~~~~ \  \:\ \:\_\/
  \  \::/          \__\::/     |  |:|      \  \:\ \:\
   \__\/           /  /:/      |  |:|       \  \:\_\/
                  /__/:/       |__|:|        \  \:\
                  \__\/         \__\|         \__\/

                /)                     /)
            _/_(/    _     _  __   _  (/_   _
     o   o  (__/ )__(/_   /_)_/ (_(_(_/(___(/_ o   o

Jake version: v0.2.70
Put your python deps in a chokehold.
🐍  Collecting Dependencies
🐍  Querying OSS Index
🐍  Auditing results from OSS Index

Non-Vulnerable Dependencies

[1/4] - pkg:pypi/setuptools@44.0.0?extension=tar.gz
[2/4] - pkg:pypi/pyyaml@5.4.1?extension=tar.gz
[3/4] - pkg:pypi/pkg-resources@0.0.0?extension=tar.gz
[4/4] - pkg:pypi/pip@20.0.2?extension=tar.gz

β•”Summary═══════════════╦═══╗
β•‘ Audited Dependencies β•‘ 4 β•‘
╠══════════════════════╬═══╣
β•‘ Vulnerablities Found β•‘ 0 β•‘
β•šβ•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•β•©β•β•β•β•

cc @bhamail / @DarthHater