Skip to content

Commit 129d9fd

Browse files
Update pip installation step to upgrade setuptools and wheel for vulnerability scanning
Signed-off-by: kmilo <kmilo.denis.glez@yandex.com>
1 parent fdca315 commit 129d9fd

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

‎.github/workflows/scan.yml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,9 @@ jobs:
3333
run: |
3434
python -m pip install --upgrade pip
3535
python -m pip install -r requirements.txt
36+
# The runner pre-installs outdated setuptools/wheel; pip-audit audits
37+
# the ENTIRE environment, so we update them to versions without CVEs.
38+
python -m pip install --upgrade setuptools wheel
3639
3740
- name: Install pip-audit
3841
run: python -m pip install pip-audit

0 commit comments

Comments
 (0)