Skip to content

Simplify Poetry workaround

Victor Engmark requested to merge victor-engmark-master-patch-66810 into master

What does this MR do?

Simplifies the Poetry workaround discussed in the poetry.lock support for Dependency Scanning issue onwards.

How to setup and validate locally

Example below:

  1. Start with a Python project
  2. Enable dependency scanning
  3. Add the new code to .gitlab-ci.yml
  4. Verify that the gemnasium-python-dependency_scanning job runs successfully.

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

The main risk is to differently configured projects, where this workaround might not work, or might break things where the original code did not. See this comment mentioning unspecified potential issues with Python 3.6, which I have not looked into.

Merge request reports