-
-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fails to parse --hash=
values embedded in requirements.txt
#16
Comments
This seems to be a failure of the crate that I'm using to parse PEP-508 text. Might be a bit hard to fix since it doesn't originate from my code, but I will look into it |
ah, i tried to have a workaround by removing the hash values from the text before parsing, but pep-508 still picks up some other complications. The reason the hashes are there is for security and it seems ironic that a security tool should avoid it just to get by. Looks like this problem would not have a stable solution till @figsoda allows for parsing hash values, through flavoring or whatever method he picks. |
--hash=
values embedded in requirements.txt
Describe the bug
When considering a
requirements.txt
file that contains additional information on the python version for which a package should be installed as well as additional arguments passed to pip, pyscan says there are no dependencies and it fails parsing the API response:To Reproduce
Steps to reproduce the behavior:
requirements.txt
file: https://github.com/anotherbridge/pdfalyzer/blob/master/requirements.txtpyscan
Expected behavior
Since the
requirements.txt
file is in a valid format (c.f. https://pip.pypa.io/en/latest/reference/requirements-file-format/) and can also be installed via pip without any issue, it is expected that pyscan detects the correct version according to the option that is specified.Desktop (please complete the following information):
The text was updated successfully, but these errors were encountered: