commit | 7fef61dd9ecafe02e7ca3078e50d4656c0dbfa35 | [log] [tgz] |
---|---|---|
author | kochera <kochera@google.com> | Fri Sep 09 11:02:40 2022 +0000 |
committer | Michael Kochera <kochera@google.com> | Fri Sep 09 20:20:56 2022 +0000 |
tree | 7c2e2e474af422eb6cd4311a1c46013ac7172069 | |
parent | b896f33391dc4b21b6ca9fc2608865053ea4454a [diff] |
Change pip installation to use requirements.txt with hashes Manifest files like requirements.txt are required for all python dependencies to ensure accurate vulnerability scanning among other things. The main steps for developing the requirments.txt is to download pip-tools, make a file called requirements.in, type the package you are trying to install in there, run pip-compile on that file and then a requirement.txt file is auto created with dependencies. BUG=b/242563296 TEST=https://console.cloud.google.com/cloud-build/builds/9184e261-b74d-4fe9-809b-4ebbe1cf7eff?project=228075978874 RELEASE_NOTES=None Change-Id: Iee0e28fa07198eea1286c46c11ed49a7583419c6 Reviewed-on: https://cos-review.googlesource.com/c/cos/tools/+/36829 Reviewed-by: Vaibhav Rustagi <vaibhavrustagi@google.com> Tested-by: Vaibhav Rustagi <vaibhavrustagi@google.com> Cloud-Build: GCB Service account <228075978874@cloudbuild.gserviceaccount.com>
This is a repository of various tools developed for Container-Optimized OS. Examples include cos-gpu-installer, cos-toolbox, etc.
See CONTRIBUTING.md for how to contribute.