./security/py-pip-audit, Scan Python environments for known vulnerabilities

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 2.7.3nb1, Package name: py312-pip-audit-2.7.3nb1, Maintainer: pkgsrc-users

pip-audit is a prototype tool for scanning Python environments for
packages with known vulnerabilities. It uses the Python Packaging
Advisory Database via the PyPI JSON API as a source of vulnerability
reports.

Master sites:

Filesize: 49.185 KB

Version history: (Expand)

CVS history: (Expand)


   2024-12-09 09:13:21 by Thomas Klausner | Files touched by this commit (3) 
Log message:
py-pip-audit: remove unused dependencies

Bump PKGREVISION.
   2024-10-14 08:46:10 by Thomas Klausner | Files touched by this commit (325) 
Log message:
*: clean-up after python38 removal
   2024-05-05 12:10:37 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-pip-audit: update to 2.7.3.

Improved handling of temporary files on Windows
Fixed a subprocess deadlock on Windows
   2024-02-29 22:10:21 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-pip-audit: updated to 2.7.2

2.7.2

Fixed

pip-audit now invokes pip with --keyring-provider=subprocess, partially fixing a \ 
regression that was introduced with another authentication fix in 2.6.2. This \ 
allows the interior pip to use keyring to perform third-party index \ 
authentication.
   2024-02-14 22:36:32 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
py-pip-audit: updated to 2.7.1

2.7.1

Fixed

Improved the error returned to users when their default temporary directory \ 
lacks execute permissions
   2024-01-14 21:33:38 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-pip-audit: update to 2.7.0.

## [2.7.0]

### Added

* `pip-audit` now includes vulnerability aliases when `--format=json` is used,
  and also includes them in other output formats if specified by adding the
  flag `--aliases`

## [2.6.3]

### Fixed

* Removed a misleading warning message that resulted in user confusion
  ([#719](https://github.com/pypa/pip-audit/pull/719))
   2023-12-30 11:35:23 by Thomas Klausner | Files touched by this commit (2) | Package updated
Log message:
py-pip-audit: update to 2.6.2.

## [2.6.2]

### Changed

* `pip-audit`'s minimum Python version is now 3.8.

### Fixed

* Fixed a hang caused by auditing requirements when resolving against
  an index that requires authentication, causing `pip` to wait indefinitely
  for credentials ([#707](https://github.com/pypa/pip-audit/pull/707))
   2023-11-07 23:38:10 by Thomas Klausner | Files touched by this commit (112) 
Log message:
*: latest py-sphinx only support Python 3.9+