Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

--ignore does not work #613

Closed
1 task done
jahagirdar opened this issue Oct 21, 2024 · 2 comments
Closed
1 task done

--ignore does not work #613

jahagirdar opened this issue Oct 21, 2024 · 2 comments

Comments

@jahagirdar
Copy link

Checklist

Safety version

3.2.8

Python version

3.10.12

Operating System

Linux Ubuntu.

Describe the problem you'd like to have solved

Check https://github.com/dyumnin/cocotb-ralgen/actions/runs/11438139741/job/31819128744
Safety is executed as follows
pdm export -f requirements --without-hashes | pdm run safety check --ignore 70612 --stdin
The Jinja Warning is still issues

1 vulnerability reported
    0 vulnerabilities ignored
  +==============================================================================+
   VULNERABILITIES FOUND
  +==============================================================================+
  -> Vulnerability found in jinja2 version 3.1.4
     Vulnerability ID: 70612

The same issue is seen if the following command is used
pdm export -f requirements --without-hashes | safety check --ignore 70612 --stdin

Describe the ideal solution

Safety should ignore the warnings specified on commandline.

Alternatives and current workarounds

None.

Additional context

NA

What I Did

Ran Github CI.

Copy link

Hi @jahagirdar, thank you for opening this issue!

We appreciate your effort in reporting this. Our team will review it and get back to you soon.
If you have any additional details or updates, feel free to add them to this issue.

Note: If this is a serious security issue that could impact the security of Safety CLI users, please email [email protected] immediately.

Thank you for contributing to Safety CLI!

@SafetyQuincyF
Copy link
Collaborator

SafetyQuincyF commented Nov 12, 2024

Hello @jahagirdar!

Thank you for reporting this issue. The "check" command has been deprecated and is no longer supported. However, we now offer the "scan" command, which includes this functionality. You can sign up for our beta program at https://platform.safetycli.com/ to learn more!

Documentation:
https://docs.safetycli.com/safety-docs/safety-cli-3/scanning-for-vulnerable-and-malicious-packages

Best regards,
Safety CLI Team

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants