public_git/bambuddy
1
0
Fork 0
mirror of https://github.com/maziggy/bambuddy.git synced 2026-09-30 03:01:21 +02:00
Code Issues Packages Projects Releases Wiki Activity

This reverts commit 929aae7202.

Browse Source
This commit is contained in:
maziggy
2026-05-20 12:42:37 +02:00
parent 929aae7202
commit 39a2a79524
1 changed files with 0 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/pip-audit.sh
-15
View File
@@ -1,15 +0,0 @@
#!/usr/bin/env bash
# Local pip-audit wrapper — mirrors the ignore list in
# .github/workflows/security.yml so `./scripts/pip-audit.sh` matches what CI sees.
# Keep both sides in sync when adding or removing ignores.
#
# CVE-2025-45768 (PYSEC-2025-183 / GHSA-65pc-fj4g-8rjx): disputed by PyJWT
# maintainers; no fix version exists. Bambuddy uses secrets.token_urlsafe(64)
# (~86 chars) and rejects file-loaded secrets shorter than 32 chars
# (backend/app/core/auth.py:177, :184). Safe to ignore permanently.
set -euo pipefail
source /opt/claude/projects/bambuddy/venv/bin/activate
exec pip-audit \
--ignore-vuln CVE-2025-45768 \
"$@"