Skip to content

Issues: pypa/pip-audit

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

53 Open 210 Closed
53 Open 210 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Bug: pre-commit hook failing when local pip-audit command works bug-candidate Might be a bug. needs-response Needs response from the reporter.
#770 opened Apr 29, 2024 by r-findley
3 tasks done
8
Support for optional dependencies/extras when auditing from pyproject.toml enhancement New feature or request
#766 opened Apr 20, 2024 by albertodiazdorado
3 tasks done
4
Provide environment variables for CLI option defaults enhancement New feature or request
#754 opened Mar 29, 2024 by bittner
3 tasks done
1
3
Allow different output formats in parallel (e.g. for SBOM reports) enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
#753 opened Mar 29, 2024 by bittner
3 tasks done
4
Possible race condition when using AuditSpinner bug-candidate Might be a bug. needs-response Needs response from the reporter.
#739 opened Feb 18, 2024 by i386x
4
Support for offline operation (e.g. using local copy of PyPA advisory repo as vulnerability service) component:vuln-sources Components that provide sources of vulnerability information enhancement New feature or request upstream Items that require upstream work or coordination
#698 opened Nov 26, 2023 by riwoodward
6
Support pip-audit configuration from pyproject.toml enhancement New feature or request
#694 opened Nov 8, 2023 by dnovvak
6
Temporary ignoring of vulnerabilities enhancement New feature or request
#676 opened Sep 21, 2023 by KeithWM
8
Duplicates are not supported in requirements.txt when run with --disable-pip bug-candidate Might be a bug. component:dep-sources Dependency sources
#662 opened Aug 14, 2023 by npalmius
2
Get vulnerability score/severity with pip-audit enhancement New feature or request upstream Items that require upstream work or coordination
#654 opened Jul 26, 2023 by matteoannotell
5
Fix adds a fixed dependency in files where there is no original one bug Something isn't working component:dep-sources Dependency sources
#633 opened Jun 12, 2023 by q0w
2
Do a better job of signaling when audited dependencies come from pip-audit itself component:dep-sources Dependency sources discussion Design discussion.
#621 opened May 25, 2023 by woodruffw
@woodruffw
7
Failure to find dependency that was installed from extra index url bug Something isn't working component:dep-sources Dependency sources
#599 opened Apr 25, 2023 by cornelius-braun
@woodruffw @tnytown
6
Support upgrading hashes with --fix bug Something isn't working
#589 opened Apr 3, 2023 by q0w
@tetsuo-cpp
5
Replace current issue templates with forms (and tweak guidance) chore Chores good first issue Good for newcomers refactoring Refactoring tasks.
#588 opened Mar 31, 2023 by woodruffw
@tnytown
Subprocess: fix stream handling component:dep-sources Dependency sources enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
#574 opened Mar 23, 2023 by woodruffw
2
Preserve pip-tools comment indents bug Something isn't working component:fixes Automatic fixing help wanted Extra attention is needed upstream Items that require upstream work or coordination
#566 opened Mar 22, 2023 by q0w
1
Ignore duplicate requirements bug Something isn't working component:dep-sources Dependency sources good first issue Good for newcomers help wanted Extra attention is needed
#564 opened Mar 21, 2023 by q0w
1
17
Run tests for Windows in GitHub Actions component:cicd CI/CD enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed plat:windows Issues reported on Windows
#553 opened Mar 17, 2023 by tetsuo-cpp
1
1
Run the offline-only tests in CI, without networking chore Chores component:cicd CI/CD component:tests Unit and integration tests pri:low low(er) priority tasks
#500 opened Jan 25, 2023 by woodruffw
Add a config/command line option to treat some downstream errors as warning instead of complete error exit component:dep-sources Dependency sources enhancement New feature or request
#478 opened Jan 12, 2023 by norg
@woodruffw
19
Environmental audits: run pip list in the local virtual environment, if present enhancement New feature or request
#455 opened Dec 28, 2022 by woodruffw
@woodruffw @tetsuo-cpp
Cannot handle ">=" in requirements.txt discussion Design discussion.
#421 opened Nov 28, 2022 by ValueRaider
@woodruffw
7
--requirement - does not work: No such file or directory: '<stdin>' enhancement New feature or request upstream Items that require upstream work or coordination
#415 opened Nov 22, 2022 by aucampia
2
Report yanked versions of packages component:cli CLI components enhancement New feature or request
#381 opened Oct 14, 2022 by sebastianw
@woodruffw
7
ProTip! Exclude everything labeled bug with -label:bug.