External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): ignore new torch/joblib/markdown CVEs in pip-audit

Browse Source 
No fixed versions available yet for:
- torch 2.12.0: 11 PYSEC advisories (transitive dep from ML packages)
- joblib 1.5.3: PYSEC-2024-277
- markdown 3.10.2: PYSEC-2026-89
This commit is contained in:
SnapOtter
2026-05-20 16:27:54 +08:00
parent 59bbe2b5e0
commit 7fe1007810
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci.yml
+13
View File
@@ -105,6 +105,19 @@ jobs:
--ignore-vuln CVE-2026-42308 --ignore-vuln CVE-2026-42308
--ignore-vuln CVE-2026-42310 --ignore-vuln CVE-2026-42310
--ignore-vuln CVE-2026-42311 --ignore-vuln CVE-2026-42311
--ignore-vuln PYSEC-2025-189
--ignore-vuln PYSEC-2025-190
--ignore-vuln PYSEC-2025-191
--ignore-vuln PYSEC-2025-192
--ignore-vuln PYSEC-2025-193
--ignore-vuln PYSEC-2025-194
--ignore-vuln PYSEC-2025-195
--ignore-vuln PYSEC-2025-196
--ignore-vuln PYSEC-2025-197
--ignore-vuln PYSEC-2025-210
--ignore-vuln PYSEC-2026-139
--ignore-vuln PYSEC-2024-277
--ignore-vuln PYSEC-2026-89
build: build:
name: Build name: Build