Merge pull request #143 from MITLibraries/IN-1240-pip-audit

IN-1240 - Replace pipenv check with pip-audit

Author: ghukill

.pre-commit-config.yaml

@@ -22,8 +22,8 @@ repos:
         language: system
         pass_filenames: true
         types: ["python"]
-      - id: safety
-        name: safety
-        entry: pipenv check --ignore 70612
+      - id: pip-audit
+        name: pip-audit
+        entry: pipenv run pip-audit
         language: system
         pass_filenames: false

Makefile

@@ -59,7 +59,7 @@ ruff: # Run 'ruff' linter and print a preview of errors
 	pipenv run ruff check .
 
 safety: # Check for security vulnerabilities and verify Pipfile.lock is up-to-date
-	pipenv check --ignore 70612
+	pipenv run pip-audit
 	pipenv verify
 
 lint-apply: # Apply changes with 'black' and resolve 'fixable errors' with 'ruff'

Pipfile

@@ -24,6 +24,7 @@ pre-commit = "*"
 pytest = "*"
 ruff = "*"
 types-requests = "*"
+pip-audit = "*"
 
 [requires]
 python_version = "3.12"