You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To do #517, we should move & refactor class Audit to be similar to class PoetryToml or class PoetryDependencies. The refactoring should preserve the functionality of the nox session dependency:audit, but it should then allow us to compare the latest tag to the current version for detected pip-audit vulnerabilities.
In order to make it possible for the latest tag to be done, we should switch to exporting the poetry lock and pyproject.toml as a requirements.txt. This is due to current limitations in pip-audit, where it MUST install dependencies to evaluate them (so we want to use a virtual environment & not modify the currently sourced one - option if not using requirements.txt & also requires us to sync env with current dependencies) and not having other options to work with poetry.