Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
  • Register
  • Sign in
  • S slapos.core
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Merge requests 38
    • Merge requests 38
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Jobs
  • Commits
Collapse sidebar
  • nexedinexedi
  • slapos.core
  • Merge requests
  • !363

check_software: check egg vulnerabilities for every used python versions

  • Review changes

  • Download
  • Patches
  • Plain diff
Merged Jérome Perrin requested to merge fix/checkSoftware_egg_vulnerabilities into master Jan 24, 2022
  • Overview 3
  • Commits 2
  • Pipelines 4
  • Changes 2

pkg_resources.Environment only scans packages for the current python version, but the checked software might be using a different python version than the python version used to check software (the slapos python). The checked software might also include packages for multiples python versions.

Compute the list used python packages from the eggs directory and use an Environment for each python version, this way we check all python versions and also when slapos python and software python are different.

Edited Jan 25, 2022 by Jérome Perrin
Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: fix/checkSoftware_egg_vulnerabilities
GitLab Nexedi Edition | About GitLab | About Nexedi | 沪ICP备2021021310号-2 | 沪ICP备2021021310号-7