mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
7620097613
* adding the pipx support to project Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> * create excutors for pipx Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> * add pipx yml Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> * chores Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> * pipx to use standard executor pattern Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> * Address PR feedback for pipx support Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> * Update pipx flags comments Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> --------- Signed-off-by: DivyanshuVortex <divyanshuchandra9027@gmail.com> Co-authored-by: Abhisek Datta <abhisek.datta@gmail.com> Co-authored-by: Sahil Bansal <bansalsahil315@gmail.com>
34 lines
855 B
YAML
34 lines
855 B
YAML
name: pipx
|
|
description: Profile for pipx executor with write access to current directory
|
|
inherits: pypi-restrictive
|
|
|
|
package_managers:
|
|
- pipx
|
|
|
|
# pipx requires PTY access to work, especially for commands like:
|
|
# pipx run cowsay hello
|
|
#
|
|
# Explicitly setting this so that it is enabled even if we decide to turn this off
|
|
# in parent profiles in the future.
|
|
allow_pty: true
|
|
|
|
# pipx-executed tools may need to bind to localhost ports (e.g., dev servers)
|
|
allow_network_bind: true
|
|
|
|
filesystem:
|
|
allow_read:
|
|
# pipx installs and manages packages in ~/.local/pipx
|
|
- ${HOME}/.local/pipx/**
|
|
- ${HOME}/.local/bin/**
|
|
|
|
# Add write permissions for pipx-specific paths
|
|
allow_write:
|
|
- ${CWD}/**
|
|
- ${HOME}/.local/pipx/**
|
|
- ${HOME}/.local/bin/**
|
|
|
|
# Additional deny rules for extra security
|
|
deny_write:
|
|
- ${CWD}/.env
|
|
- ${CWD}/.env.*
|