ci: fix trivy action

By default it also checks for secrets in compiled Python binary files (/var/lib/syslog-ng-venv/lib/python3.12/site-packages/google/auth/crypt/__pycache__/_python_rsa.cpython-312.pyc) See pip docs for more details https://pip.pypa.io/en/stable/cli/pip_install/ Signed-off-by: Szilard Parrag <[email protected]>
axoflow · Oct 9, 2024 · 2fae331 · 2fae331
1 parent ba344fa
commit 2fae331
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/scripts/syslog-ng-update-virtualenv.in b/scripts/syslog-ng-update-virtualenv.in
@@ -84,6 +84,6 @@ ${SYSTEM_PYTHON} -m venv ${python_venvdir}
 echo "Running python -m pip install..."
 ${VENV_PYTHON} -m pip install --upgrade pip
 ${VENV_PYTHON} -m pip install --upgrade pip setuptools
-${VENV_PYTHON} -m pip install --upgrade -r "${REQUIREMENTS_FILE}"
+${VENV_PYTHON} -m pip install --no-compile --upgrade -r "${REQUIREMENTS_FILE}"
 cp "${REQUIREMENTS_FILE}" "${python_venvdir}"
 echo "Finished."