Chore: Fix setuptools vulnerability

Signed-off-by: Matthew Watkins <[email protected]>
os-climate · Nov 21, 2023 · 53a3eca · 53a3eca
1 parent f7a5c08
commit 53a3eca
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 5 deletions.
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
@@ -32,11 +32,7 @@ jobs:
       - name: 'Install dependencies'
         run: |
           pip install --upgrade pip
-          python -m pip install -r requirements.txt
           python -m pip install .
 
       - name: 'Run: pip-audit'
         uses: pypa/[email protected]
-        # with:
-          # ignore-vulns: |
-            # PYSEC-2023-163
diff --git a/Pipfile b/Pipfile
@@ -24,6 +24,7 @@ pandas-profiling = "*"
 openscm-units = "*"
 grpcio-health-checking = "==1.48.2"
 python-pachyderm = "*"
+setuptools = ">=65.5.1"
 
 [requires]
 python_version = "3.9"
diff --git a/Pipfile.lock b/Pipfile.lock