From 2fae3311ea325a7037021e6d9717dd05a8d0d0ba Mon Sep 17 00:00:00 2001
From: Szilard Parrag <szilard.parrag@axoflow.com>
Date: Wed, 9 Oct 2024 10:22:33 +0200
Subject: [PATCH] ci: fix trivy action

By default it also checks for secrets in compiled Python binary files
(/var/lib/syslog-ng-venv/lib/python3.12/site-packages/google/auth/crypt/__pycache__/_python_rsa.cpython-312.pyc)

See pip docs for more details
https://pip.pypa.io/en/stable/cli/pip_install/

Signed-off-by: Szilard Parrag <szilard.parrag@axoflow.com>
---
 scripts/syslog-ng-update-virtualenv.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/syslog-ng-update-virtualenv.in b/scripts/syslog-ng-update-virtualenv.in
index 2188d350e6..8ef1b34c25 100755
--- a/scripts/syslog-ng-update-virtualenv.in
+++ b/scripts/syslog-ng-update-virtualenv.in
@@ -84,6 +84,6 @@ ${SYSTEM_PYTHON} -m venv ${python_venvdir}
 echo "Running python -m pip install..."
 ${VENV_PYTHON} -m pip install --upgrade pip
 ${VENV_PYTHON} -m pip install --upgrade pip setuptools
-${VENV_PYTHON} -m pip install --upgrade -r "${REQUIREMENTS_FILE}"
+${VENV_PYTHON} -m pip install --no-compile --upgrade -r "${REQUIREMENTS_FILE}"
 cp "${REQUIREMENTS_FILE}" "${python_venvdir}"
 echo "Finished."