File tree 1 file changed +4
-2
lines changed
docs/docs/coverage/language 1 file changed +4
-2
lines changed Original file line number Diff line number Diff line change @@ -54,7 +54,8 @@ keyring >= 4.1.1 # Minimum version 4.1.1
54
54
Mopidy-Dirble ~= 1.1 # Minimum version 1.1
55
55
python-gitlab==2.0.* # Minimum version 2.0.0
56
56
```
57
- Also, there is a way to convert unsupported version specifiers - use the ` pip freeze ` command.
57
+ Also, there is a way to convert unsupported version specifiers - use either the ` pip-compile ` tool (which doesn't install the packages)
58
+ or call ` pip freeze ` from the virtual environment where the requirements are already installed.
58
59
59
60
``` bash
60
61
$ cat requirements.txt
@@ -81,7 +82,8 @@ wheel==0.42.0
81
82
` requirements.txt ` files usually contain only the direct dependencies and not contain the transitive dependencies.
82
83
Therefore, Trivy scans only for the direct dependencies with ` requirements.txt ` .
83
84
84
- To detect transitive dependencies as well, you need to generate ` requirements.txt ` with ` pip freeze ` .
85
+ To detect transitive dependencies as well, you need to generate ` requirements.txt ` that contains them.
86
+ Like described above, tou can do it with ` pip freeze ` or ` pip-compile ` .
85
87
86
88
``` zsh
87
89
$ cat requirements.txt
# it will only find `[email protected] `.
You can’t perform that action at this time.
0 commit comments