Skip to content

Issues: pypa/pip-audit

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

53 Open 217 Closed
53 Open 217 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Feature: Output to HTML component:output-formats Supported output formats enhancement New feature or request
#849 opened Oct 27, 2024 by ajpenner
3 tasks done
1
Bug: doesn't work without pip installed bug Something isn't working component:cli CLI components component:dep-sources Dependency sources
#842 opened Oct 16, 2024 by DetachHead
3 tasks done
3
Feature: stable API to add additional VulnerabilityService instances for private repositories enhancement New feature or request
#805 opened Aug 2, 2024 by davidjmemmett
3 tasks done
10
Use pip's http-v2 cache enhancement New feature or request refactoring Refactoring tasks.
#794 opened Jul 9, 2024 by woodruffw
Support for optional dependencies/extras when auditing from pyproject.toml enhancement New feature or request
#766 opened Apr 20, 2024 by albertodiazdorado
3 tasks done
5
Allow different output formats in parallel (e.g. for SBOM reports) enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
#753 opened Mar 29, 2024 by bittner
3 tasks done
4
Possible race condition when using AuditSpinner bug-candidate Might be a bug. needs-response Needs response from the reporter.
#739 opened Feb 18, 2024 by i386x
4
Support for offline operation (e.g. using local copy of PyPA advisory repo as vulnerability service) component:vuln-sources Components that provide sources of vulnerability information enhancement New feature or request upstream Items that require upstream work or coordination
#698 opened Nov 26, 2023 by riwoodward
7
Support pip-audit configuration from pyproject.toml enhancement New feature or request
#694 opened Nov 8, 2023 by dnovvak
6
Temporary ignoring of vulnerabilities enhancement New feature or request
#676 opened Sep 21, 2023 by KeithWM
8
Duplicates are not supported in requirements.txt when run with --disable-pip bug-candidate Might be a bug. component:dep-sources Dependency sources
#662 opened Aug 14, 2023 by npalmius
2
Get vulnerability score/severity with pip-audit enhancement New feature or request upstream Items that require upstream work or coordination
#654 opened Jul 26, 2023 by matteoannotell
5
Fix adds a fixed dependency in files where there is no original one bug Something isn't working component:dep-sources Dependency sources
#633 opened Jun 12, 2023 by q0w
2
Do a better job of signaling when audited dependencies come from pip-audit itself component:dep-sources Dependency sources discussion Design discussion.
#621 opened May 25, 2023 by woodruffw
@woodruffw
7
Failure to find dependency that was installed from extra index url bug Something isn't working component:dep-sources Dependency sources
#599 opened Apr 25, 2023 by cornelius-braun
@woodruffw @tnytown
8
Support upgrading hashes with --fix bug Something isn't working
#589 opened Apr 3, 2023 by q0w
@tetsuo-cpp
5
Replace current issue templates with forms (and tweak guidance) chore Chores good first issue Good for newcomers refactoring Refactoring tasks.
#588 opened Mar 31, 2023 by woodruffw
@tnytown
Subprocess: fix stream handling component:dep-sources Dependency sources enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed
#574 opened Mar 23, 2023 by woodruffw
2
Preserve pip-tools comment indents bug Something isn't working component:fixes Automatic fixing help wanted Extra attention is needed upstream Items that require upstream work or coordination
#566 opened Mar 22, 2023 by q0w
1
Ignore duplicate requirements bug Something isn't working component:dep-sources Dependency sources good first issue Good for newcomers help wanted Extra attention is needed
#564 opened Mar 21, 2023 by q0w
1
17
Run tests for Windows in GitHub Actions component:cicd CI/CD enhancement New feature or request good first issue Good for newcomers help wanted Extra attention is needed plat:windows Issues reported on Windows
#553 opened Mar 17, 2023 by tetsuo-cpp
1
1
Run the offline-only tests in CI, without networking chore Chores component:cicd CI/CD component:tests Unit and integration tests pri:low low(er) priority tasks
#500 opened Jan 25, 2023 by woodruffw
Add a config/command line option to treat some downstream errors as warning instead of complete error exit component:dep-sources Dependency sources enhancement New feature or request
#478 opened Jan 12, 2023 by norg
@woodruffw
19
Environmental audits: run pip list in the local virtual environment, if present enhancement New feature or request
#455 opened Dec 28, 2022 by woodruffw
@woodruffw @tetsuo-cpp
Cannot handle ">=" in requirements.txt discussion Design discussion.
#421 opened Nov 28, 2022 by ValueRaider
@woodruffw
7
ProTip! Adding no:label will show everything without a label.