Skip to content

build: support Component Governance - #177

Open
hallvictoria wants to merge 3 commits into
devfrom
hallvictoria/component-governance
Open

build: support Component Governance#177
hallvictoria wants to merge 3 commits into
devfrom
hallvictoria/component-governance

Conversation

@hallvictoria

@hallvictoria hallvictoria commented Aug 7, 2026

Copy link
Copy Markdown
Collaborator
  • Generates a temporary requirements.txt from pyproject.toml, allowing Component Governance to scan Python dependencies without maintaining duplicate manifests
  • Configures Component Governance to fail the pipeline when a medium-or-higher vulnerability is identified.
  • Bump min Python version to 3.10 to address vulnerabilities in 3.9 deps

@hallvictoria
hallvictoria marked this pull request as ready for review August 10, 2026 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants