lucas-c / pre-commit-hooks-safety Goto Github PK

Python dependencies checker...........................................................................................................................................................................................................Failed
hookid: python-safety-dependencies-check

Traceback (most recent call last):
  File "/home/user/.pre-commit/repoR_abcd/py_env-default/bin/safety", line 11, in <module>
    load_entry_point('pre-commit-hooks-safety==1.0.0', 'console_scripts', 'safety')()
  File "/home/user/.pre-commit/repoR_abcd/py_env-default/local/lib/python2.7/site-packages/pkg_resources/__init__.py", line 564, in load_entry_point
    return get_distribution(dist).load_entry_point(group, name)
  File "/home/user/.pre-commit/repoR_abcd/py_env-default/local/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2608, in load_entry_point
    return ep.load()
  File "/home/user/.pre-commit/repoR_abcd/py_env-default/local/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2268, in load
    return self.resolve()
  File "/home/user/.pre-commit/repoR_abcd/py_env-default/local/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2274, in resolve
    module = __import__(self.module_name, fromlist=['__name__'], level=0)
  File "/home/user/.pre-commit/repoR_abcd/py_env-default/local/lib/python2.7/site-packages/pre_commit_hooks/safety.py", line 3, in <module>
    from safety.cli import check
ImportError: No module named cli

Traceback (most recent call last):
  File "/home/runner/.cache/pre-commit/repodztrbsrf/py_env-python3.10.7/bin/safety_check", line 5, in <module>
    from pre_commit_hooks.safety_check import main
  File "/home/runner/.cache/pre-commit/repodztrbsrf/py_env-python3.10.7/lib/python3.10/site-packages/pre_commit_hooks/safety_check.py", line 12, in <module>
    from safety.cli import cli
  File "/home/runner/.cache/pre-commit/repodztrbsrf/py_env-python3.10.7/lib/python3.10/site-packages/safety/cli.py", line 13, in <module>
    from safety.alerts import alert
ModuleNotFoundError: No module named 'safety.alerts'

-   repo: https://github.com/Lucas-C/pre-commit-hooks-safety
    rev: v1.3.1
    hooks:
    -   id: python-safety-dependencies-check
        name: Check dependencies for vulnerability
        files: requirements*
        args: ["--disable-telemetry"]

Error: No such option: --disable-telemetry Did you mean --disable-optional-telemetry?

safety_check: error: Unsupported mix of pyproject.toml & requirements files found

File "/home/jenkins/workspace/cl-infratools-jenkinsfile_v1.1.1/.cache/pre-commit/repoLdwXZS/y_env-python2.7/binsafety_check", line 8, in <module>

RuntimeError: maximum recursion depth exceeded while calling a Python object

Unexpected Exception happened: 'NoneType' object has no attribute 'telemetry'
Traceback (most recent call last):
  File "/home/runner/.cache/pre-commit/reponl89_evy/py_env-python3.10.4/lib/python3.10/site-packages/safety/cli.py", line 101, in check
    announcements = safety.get_announcements(key=key, proxy=proxy_dictionary, telemetry=ctx.parent.telemetry)
AttributeError: 'NoneType' object has no attribute 'telemetry'

safety...................................................................Failed
hookid: python-safety-dependencies-check

╒══════════════════════════════════════════════════════════════════════════════╕
│                                                                              │
│                               /$$$$$$            /$$                         │
│                              /$$__  $$          | $$                         │
│           /$$$$$$$  /$$$$$$ | $$  \__//$$$$$$  /$$$$$$   /$$   /$$           │
│          /$$_____/ |____  $$| $$$$   /$$__  $$|_  $$_/  | $$  | $$           │
│         |  $$$$$$   /$$$$$$$| $$_/  | $$$$$$$$  | $$    | $$  | $$           │
│          \____  $$ /$$__  $$| $$    | $$_____/  | $$ /$$| $$  | $$           │
│          /$$$$$$$/|  $$$$$$$| $$    |  $$$$$$$  |  $$$$/|  $$$$$$$           │
│         |_______/  \_______/|__/     \_______/   \___/   \____  $$           │
│                                                          /$$  | $$           │
│                                                         |  $$$$$$/           │
│  by pyup.io                                              \______/            │
│                                                                              │
╞══════════════════════════════════════════════════════════════════════════════╡
│ REPORT                                                                       │
│ checked 69 packages, using default DB                                        │
╞════════════════════════════╤═══════════╤══════════════════════════╤══════════╡
│ package                    │ installed │ affected                 │ ID       │
╞════════════════════════════╧═══════════╧══════════════════════════╧══════════╡
│ requests                   │ 2.18.4    │ <=2.19.1                 │ 36546    │
╞══════════════════════════════════════════════════════════════════════════════╡
│ The Requests package before 2.19.1 sends an HTTP Authorization header to an  │
│ http URI upon receiving a same-hostname https-to-http redirect, which makes  │
│ it easier for remote attackers to discover credentials by sniffing the       │
│ network.                                                                     │
╞══════════════════════════════════════════════════════════════════════════════╡
│ urllib3                    │ 1.22      │ <1.23                    │ 36541    │
╞══════════════════════════════════════════════════════════════════════════════╡
│ urllib3 before 1.23 does not remove the Authorization HTTP header when       │
│ following a cross-origin redirect (i.e., a redirect that differs in host,    │
│ port, or scheme). This can allow for credentials in the Authorization header │
│ to be exposed to unintended hosts or transmitted in cleartext.               │
╘══════════════════════════════════════════════════════════════════════════════╛

docformatter.............................................................Passed
Poetry check.........................................(no files to check)Skipped
codespell................................................................Passed

nifty-logging-colours-6pZ7Y-k_-py3.7(master|+14…4); safety check
╒══════════════════════════════════════════════════════════════════════════════╕
│                                                                              │
│                               /$$$$$$            /$$                         │
│                              /$$__  $$          | $$                         │
│           /$$$$$$$  /$$$$$$ | $$  \__//$$$$$$  /$$$$$$   /$$   /$$           │
│          /$$_____/ |____  $$| $$$$   /$$__  $$|_  $$_/  | $$  | $$           │
│         |  $$$$$$   /$$$$$$$| $$_/  | $$$$$$$$  | $$    | $$  | $$           │
│          \____  $$ /$$__  $$| $$    | $$_____/  | $$ /$$| $$  | $$           │
│          /$$$$$$$/|  $$$$$$$| $$    |  $$$$$$$  |  $$$$/|  $$$$$$$           │
│         |_______/  \_______/|__/     \_______/   \___/   \____  $$           │
│                                                          /$$  | $$           │
│                                                         |  $$$$$$/           │
│  by pyup.io                                              \______/            │
│                                                                              │
╞══════════════════════════════════════════════════════════════════════════════╡
│ REPORT                                                                       │
│ checked 168 packages, using default DB                                       │
╞══════════════════════════════════════════════════════════════════════════════╡
│ No known security vulnerabilities found.                                     │
╘══════════════════════════════════════════════════════════════════════════════╛

-   repo: https://github.com/Lucas-C/pre-commit-hooks-safety
    rev: v1.1.0
    hooks:
    -   id: python-safety-dependencies-check

Unexpected Exception happened: 'NoneType' object has no attribute 'telemetry'
Traceback (most recent call last):
  File "/<folders>/.cache/pre-commit/repo4126ctqi/py_env-python3.9/lib/python3.9/site-packages/safety/cli.py", line 110, in check
    announcements = safety.get_announcements(key=key, proxy=proxy_dictionary, telemetry=ctx.parent.telemetry)
AttributeError: 'NoneType' object has no attribute 'telemetry'
Unhandled exception happened: 'NoneType' object has no attribute 'telemetry'

repos:
  # Check Python dependencies against safety-db.
  - repo: 'https://github.com/Lucas-C/pre-commit-hooks-safety'
    rev: v1.2.4
    hooks:
      - id: python-safety-dependencies-check
        args: [--ignore=42194]

-   repo: https://github.com/Lucas-C/pre-commit-hooks-safety
    rev: v1.2.2
    hooks:
    -   id: python-safety-dependencies-check
        args: [files pyproject.toml]

safety...................................................................Failed
hookid: python-safety-dependencies-check

Traceback (most recent call last):
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/bin/safety_check", line 11, in <module>
    sys.exit(main())
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/pre_commit_hooks/safety_check.py", line 8, in main
    check.main(['--full-report'] + sum((['-r', f] for f in argv), []))
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/click/core.py", line 697, in main
    rv = self.invoke(ctx)
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/click/core.py", line 895, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/click/core.py", line 535, in invoke
    return callback(*args, **kwargs)
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/safety/cli.py", line 71, in check
    key=key
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/safety/formatter.py", line 196, in report
    return SheetReport.render(vulns, full=full, checked_packages=checked_packages, used_db=used_db)
  File "~/.cache/pre-commit/repoqfzf4xho/py_env-python3.6/lib/python3.6/site-packages/safety/formatter.py", line 116, in render
    table.append("│ {:76} │".format(line.encode('utf-8')))
TypeError: unsupported format string passed to bytes.__format__

The `--dev` option is deprecated, use the `--with dev` notation instead.

safety...................................................................Failed
- hook id: python-safety-dependencies-check
- exit code: 1

+==============================================================================+
|                                                                              |
|                               /$$$$$$            /$$                         |
|                              /$$__  $$          | $$                         |
|           /$$$$$$$  /$$$$$$ | $$  \__//$$$$$$  /$$$$$$   /$$   /$$           |
|          /$$_____/ |____  $$| $$$$   /$$__  $$|_  $$_/  | $$  | $$           |
|         |  $$$$$$   /$$$$$$$| $$_/  | $$$$$$$$  | $$    | $$  | $$           |
|          \____  $$ /$$__  $$| $$    | $$_____/  | $$ /$$| $$  | $$           |
|          /$$$$$$$/|  $$$$$$$| $$    |  $$$$$$$  |  $$$$/|  $$$$$$$           |
|         |_______/  \_______/|__/     \_______/   \___/   \____  $$           |
|                                                          /$$  | $$           |
|                                                         |  $$$$$$/           |
|  by pyup.io                                              \______/            |
|                                                                              |
+==============================================================================+
| REPORT                                                                       |
| checked 160 packages, using free DB (updated once a month)                   |
+==============================================================================+
| No known security vulnerabilities found.                                     |
+==============================================================================+
Traceback (most recent call last):
  File "C:\Users\<username>\AppData\Local\Programs\Python\Python38\lib\runpy.py", line 194, in _run_module_as_main
    return _run_code(code, main_globals, None,
  File "C:\Users\<username>\AppData\Local\Programs\Python\Python38\lib\runpy.py", line 87, in _run_code  
    exec(code, run_globals)
  File "C:\Users\<username>\.cache\pre-commit\repo1t7i50ag\py_env-python3.8\Scripts\safety_check.EXE\__main__.py", line 7, in <module>
  File "C:\Users\<username>\.cache\pre-commit\repo1t7i50ag\py_env-python3.8\lib\site-packages\pre_commit_hooks\safety_check.py", line 46, in main
    return call_safety_check([tmp_requirements.name], parsed_args.ignore, parsed_args.full_report, args_rest)
  File "C:\Users\<username>\AppData\Local\Programs\Python\Python38\lib\contextlib.py", line 120, in __exit__
    next(self.gen)
  File "C:\Users\<username>\.cache\pre-commit\repo1t7i50ag\py_env-python3.8\lib\site-packages\pre_commit_hooks\safety_check.py", line 81, in convert_poetry_to_requirements
    os.remove(ntf.name)
PermissionError: [WinError 32] The process cannot access the file because it is being used by another 
process: 'C:\\Users\\<username>\\AppData\\Local\\Temp\\tmpsp4pt95s'

- hook id: python-safety-dependencies-check
- exit code: 2

usage: safety_check
       [-h]
       [--full-report]
       [--short-report]
       [--ignore IGNORE]
       files
       [files ...]
safety_check: error: Unsupported build tool: this pre-commit hook currently only handles pyproject.toml with Poetry

$ poetry export --with=dev | grep '^[^ ]' | wc -l
30

$ poetry export --with=dev -E freeipa-vault -E container | grep '^[^ ]' | wc -l
48

[tool.poetry.extras]
freeipa-vault = ["ipaclient", "ipapython"]
container = ["gunicorn", "setproctitle"]

poetry export --dev --format requirements.txt | safety check --stdin