Skip to content

Commit f22fb8e

Browse files
committed
Remove running pip-audit from CI.
pip has had a recent CVE, and as a library (and not an app) it is difficult to run pip-audit in a way that has value but is segregated from pip-audit's own deps such that we don't encounter this kind of false positive.
1 parent 1602925 commit f22fb8e

File tree

1 file changed

+0
-9
lines changed

1 file changed

+0
-9
lines changed

noxfile.py

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -42,15 +42,6 @@ def tests(session):
4242
session.run("pytest", "--verbosity=3", "--pythonwarnings=error", env=env)
4343

4444

45-
@session()
46-
def audit(session):
47-
"""
48-
Audit dependencies for vulnerabilities.
49-
"""
50-
session.install("pip-audit", ROOT)
51-
session.run("python", "-m", "pip_audit")
52-
53-
5445
@session(tags=["build"])
5546
def build(session):
5647
"""

0 commit comments

Comments
 (0)