Skip to content

Commit

Permalink
Ignore numpy CVE-2021-41495 until safety db is updated (#218)
Browse files Browse the repository at this point in the history
Ignore [CVE-2021-41495](GHSA-5545-2q6w-2gh6) affecting numpy until safety database is monthly updated.

See [safety](pyupio/safety#364) and [numpy](numpy/numpy#19038) issues
  • Loading branch information
andrewbolster committed Mar 8, 2022
1 parent bde1c65 commit 35e8838
Showing 1 changed file with 8 additions and 1 deletion.
9 changes: 8 additions & 1 deletion noxfile.py
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,14 @@ def safety(session: Session) -> None:
"""Scan dependencies for insecure packages."""
requirements = session.poetry.export_requirements()
session.install("safety")
session.run("safety", "check", "--full-report", f"--file={requirements}")
session.run(
"safety",
"check",
"--full-report",
f"--file={requirements}",
"--ignore",
"44715",
)


@session(python=python_versions)
Expand Down

0 comments on commit 35e8838

Please sign in to comment.