Merge pull request OpenMDAO#2734 from swryan/gitpython

Temporarily ignore GitPython vulnerability in audit
guidoca · Dec 16, 2022 · af8f73e · af8f73e
2 parents 785c481 + c059ec4
commit af8f73e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/openmdao_audit.yml b/.github/workflows/openmdao_audit.yml
@@ -120,13 +120,13 @@ jobs:
           echo "found in the Python Packaging Advisory Database"
           echo "(Temporarily ignoring PYSEC-2022-237 in mistune, required by nbconvert)"
           echo "======================================================================="
-          python -m pip_audit -s pypi --ignore-vuln PYSEC-2022-237
+          python -m pip_audit -s pypi --ignore-vuln PYSEC-2022-237 --ignore-vuln GHSA-hcpj-qp55-gfph
 
           echo "======================================================================="
           echo "Scan environment for packages with known vulnerabilities"
           echo "found in the Open Source Vulnerability database"
           echo "======================================================================="
-          python -m pip_audit -s osv
+          python -m pip_audit -s osv --ignore-vuln GHSA-hcpj-qp55-gfph
 
       - name: Notify slack
         uses: act10ns/slack@v1.6.0