Skip to content

Ignore pre-defined filenames when PIP_REQUIREMENTS_FILE is set

Nick Ilieskou requested to merge 350949_fix_pip_requirements_file into master

What does this MR do?

This fixes a bug where gemnasium-python scans a dependency file other than the one specified in PIP_REQUIREMENTS_FILE.

  • When PIP_REQUIREMENTS_FILE is set,
    • Use it as the only supported filename for pip.
    • Ignore dependency files handled by package managers other than pip.
    • Show a warning if has a directory component.

What are the relevant issue numbers?

PIP_REQUIREMENTS_FILE variable is ignored by py... (gitlab-org/gitlab#350949 - closed)

Does this MR meet the acceptance criteria?

Edited by Fabien Catteau

Merge request reports