From 068114aaff4e1e1c5e6a06a07eb20911dc93fb29 Mon Sep 17 00:00:00 2001
From: kriptoburak <kriptoburak@users.noreply.github.com>
Date: Fri, 24 Jul 2026 19:38:47 +0300
Subject: [PATCH] fix: audit locked Python dependencies

Signed-off-by: kriptoburak <kriptoburak@users.noreply.github.com>
---
 scripts/audit | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/scripts/audit b/scripts/audit
index a8c57ad..9c85c97 100755
--- a/scripts/audit
+++ b/scripts/audit
@@ -8,10 +8,22 @@ set -euo pipefail
 
 cd "$(dirname "$0")/.."
 
-echo "==> Synchronizing the locked audit environment"
-uv sync --locked --all-extras --group pydantic-v2
+audit_requirements="$(mktemp "${TMPDIR:-/tmp}/xquik-python-audit.XXXXXX")"
+trap 'rm -f -- "$audit_requirements"' EXIT
 
-site_packages="$(uv run python -c 'import site; print(site.getsitepackages()[0])')"
+echo "==> Exporting locked third-party dependencies"
+uv export \
+  --quiet \
+  --locked \
+  --all-extras \
+  --group pydantic-v2 \
+  --no-emit-project \
+  --format requirements-txt \
+  --output-file "$audit_requirements"
 
-echo "==> Auditing installed locked dependencies"
-uvx --from pip-audit==2.10.1 pip-audit --strict --path "$site_packages"
+echo "==> Auditing locked third-party dependencies"
+uvx --from pip-audit==2.10.1 pip-audit \
+  --strict \
+  --disable-pip \
+  --require-hashes \
+  --requirement "$audit_requirements"