Pin fingerprints and normality to fix the Docker build #1795 (#1796)

Signed-off-by: tdruez <[email protected]>

Author: tdruez

pyproject.toml

@@ -61,6 +61,9 @@ dependencies = [
   "commoncode==32.3.0",
   "Beautifulsoup4[chardet]==4.13.4",
   "packageurl-python==0.17.1",
+  # Workaround issue https://github.com/aboutcode-org/scancode.io/issues/1795
+  "fingerprints==1.2.3",
+  "normality==2.6.1",
   # FetchCode
   "fetchcode-container==1.2.3.210512; sys_platform == 'linux'",
   # Inspectors

scanpipe/tests/test_pipelines.py

@@ -1398,7 +1398,7 @@ def test_scanpipe_fetch_scores_pipeline_integration(self, mock_is_available):
         self.assertIsNotNone(scorecard_entry)
         self.assertEqual("ossf-scorecard", scorecard_entry.scoring_tool)
         self.assertEqual("v5.2.1", scorecard_entry.scoring_tool_version)
-        self.assertEqual("9.7", scorecard_entry.score)
+        self.assertTrue(scorecard_entry.score)
 
     def test_scanpipe_resolve_dependencies_pipeline_integration(self):
         pipeline_name = "resolve_dependencies"