Skip to content

Move & refactor class Audit for use in nox session as well as vulnerability detection for the nox session release:prepare addition #518

@ArBridgeman

Description

@ArBridgeman

Summary

To do #517, we should move & refactor class Audit to be similar to class PoetryToml or class PoetryDependencies. The refactoring should preserve the functionality of the nox session dependency:audit, but it should then allow us to compare the latest tag to the current version for detected pip-audit vulnerabilities.

In order to make it possible for the latest tag to be done, we should switch to exporting the poetry lock and pyproject.toml as a requirements.txt. This is due to current limitations in pip-audit, where it MUST install dependencies to evaluate them (so we want to use a virtual environment & not modify the currently sourced one - option if not using requirements.txt & also requires us to sync env with current dependencies) and not having other options to work with poetry.

Metadata

Metadata

Assignees

Labels

refactoringCode improvement without behavior change

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions