fixing linter and dependabot

Barthelemy-Drabczuk · Barthelemy-Drabczuk · commit f77fdac93799 · 2026-02-17T11:59:30.000+01:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -5,9 +5,3 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
-
-  # Keep pip/PyPI dependencies up to date
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "weekly"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -40,3 +40,7 @@ jobs:
 
       - name: Pytest
         run: pixi run test
+
+      - name: pip-audit (CVE scan)
+        continue-on-error: true
+        run: pixi run audit
diff --git a/pixi.lock b/pixi.lock
diff --git a/pixi.toml b/pixi.toml
@@ -24,6 +24,7 @@ huggingface-hub = ">=0.20.0"
 transformers = ">=4.36.0"
 datasets = ">=2.16.0"
 ruff = ">=0.9.0"
+pip-audit = ">=2.7.0"
 
 [tasks]
 # Initialize submodules
@@ -96,6 +97,7 @@ uninstall-all = """
 lint = "ruff check src/ tests/"
 lint-fix = "ruff check --fix src/ tests/"
 format = "ruff format src/ tests/"
+audit = "pip-audit"
 
 # Testing tasks
 test = "pytest tests/ -v"
diff --git a/src/generate_embeddings.py b/src/generate_embeddings.py
@@ -29,7 +29,7 @@
 if _CHAMPOLLION_DIR not in sys.path:
     sys.path.insert(0, _CHAMPOLLION_DIR)
 
-from contrastive.evaluation.cka_coherence import test_models_coherence_from_directory
+from contrastive.evaluation.cka_coherence import test_models_coherence_from_directory  # noqa: E402
 
 
 class ModelFetchStrategy(ABC):
