Skip to content
Snippets Groups Projects
Commit 1091fa7e authored by nimrod's avatar nimrod
Browse files

Skip locked requirements.txt for Docker image.

Don't ship a requirements.txt file with locked versions of packages just
for the Docker image. The test don't include the dependencies anyway so
there's no point and without hashes there's no security benefits.
Instead use bump-version to update the version in the Docker image and
remove hashin package and the update-reqs pipenv script.
parent 3a5d099e
No related branches found
No related tags found
No related merge requests found
*
!requirements.txt
FROM python:3.7-alpine3.9
COPY requirements.txt /
RUN pip install --progress-bar=off --no-cache-dir -r requirements.txt
RUN pip install --progress-bar=off --no-cache-dir check-s3-bucket==0.2.3
ENTRYPOINT [ "/usr/local/bin/check_s3_bucket" ]
......@@ -10,7 +10,6 @@ twine = "*"
check-s3-bucket = {editable = true,path = "."}
dbus-python = "*"
keyring = "*"
hashin = "*"
[packages]
......@@ -22,4 +21,3 @@ ci = "pre-commit run --all-files"
build = "python setup.py bdist_wheel"
clean = "git clean -fdX"
upload = "twine upload -s dist/*"
update-reqs = "hashin -u"
{
"_meta": {
"hash": {
"sha256": "780779a0114819967d7e8da079ae35331cdac7c6457dbae8cb0e657a9cc5e3a0"
"sha256": "ab68f9a4df2b89b3a2b7c32a41d5377afb0e5e30b444166bf46b1e827cb3b738"
},
"pipfile-spec": 6,
"requires": {
......@@ -40,10 +40,10 @@
},
"botocore": {
"hashes": [
"sha256:13e75f594c77988efd13f0862f3c7397d587e74b623fe0825d48b0ec0dc96d6b",
"sha256:1fa1ad4be9e9fea77eed7d5021be4283e9bcfecc60d2de83f96552025c4725d1"
"sha256:a2ceaa00724228a961ef6f97da60ab09f3161a76e2f3ae82a49be396ca1083fc",
"sha256:f049dbfe83423f5cf350a861861e7f904967dea5e142ec1a17c70c07f9fdb117"
],
"version": "==1.12.172"
"version": "==1.12.180"
},
"bumpversion": {
"hashes": [
......@@ -154,14 +154,6 @@
],
"version": "==0.3"
},
"hashin": {
"hashes": [
"sha256:dbace6900d8de44f3106a64496803e45843cf4974755613db811a487fadbf4c6",
"sha256:fe764df71cabbbddfa72aa4d6685581c932bb5cf9100ddee6b2b04f3446ae2f7"
],
"index": "pypi",
"version": "==0.14.5"
},
"identify": {
"hashes": [
"sha256:0a11379b46d06529795442742a043dc2fa14cd8c995ae81d1febbc5f1c014c87",
......@@ -211,20 +203,6 @@
],
"version": "==1.3.3"
},
"packaging": {
"hashes": [
"sha256:0c98a5d0be38ed775798ece1b9727178c4469d9c3b4ada66e8e6b7849f8732af",
"sha256:9e1cbf8c12b1f1ce0bb5344b8d7ecf66a6f8a6e91bcb0c84593ed6d3ab5c4ab3"
],
"version": "==19.0"
},
"pip-api": {
"hashes": [
"sha256:742b3edb5b077853ffcfec8a849f6ff1a622c6ecf648adb5fa0e4594998fcd46",
"sha256:a685eb315b9f10f6df4ceb66f3710148c8ad7de2d4ff29ee98fed0e4d949ec81"
],
"version": "==0.0.10"
},
"pkginfo": {
"hashes": [
"sha256:7424f2c8511c186cd5424bbf31045b77435b37a8d604990b79d4e70d741148bb",
......@@ -253,13 +231,6 @@
],
"version": "==2.4.2"
},
"pyparsing": {
"hashes": [
"sha256:1873c03321fc118f4e9746baf201ff990ceb915f433f23b395f5580d1840cb2a",
"sha256:9b6323ef4ab914af344ba97510e966d64ba91055d6b9afa6b30799340e89cc03"
],
"version": "==2.4.0"
},
"python-dateutil": {
"hashes": [
"sha256:7e6584c74aeed623791615e26efd690f29817a27c73085b78e4bad02493df2fb",
......
botocore==1.12.172
check-s3-bucket==0.2.0
docutils==0.14
jmespath==0.9.4
python-dateutil==2.8.0
pytz==2019.1
six==1.12.0
urllib3==1.25.3
......@@ -10,3 +10,5 @@ universal = 1
[bumpversion:file:check_s3_bucket/__init__.py]
[bumpversion:file:Dockerfile]
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment