robojerk/codeql-action

Merge pull request #349 from github/prevent-accidental-analysis-of-get-pip

Browse source 
Prevent accidental analysis of the `get-pip.py` script.
This commit is contained in:
Chris Gavin 2020-12-22 14:48:15 +00:00 • committed by GitHub
commit 094554cf89
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
python-setup/install_tools.sh
View file

@ -31,8 +31,7 @@ python3 -m pip install --user pipenv
if command -v python2 &> /dev/null; then
# Setup Python 2 dependency installation tools.
# The Ubuntu 20.04 GHA environment does not come with a Python 2 pip
curl https://bootstrap.pypa.io/get-pip.py --output get-pip.py
python2 get-pip.py
curl --location --fail https://bootstrap.pypa.io/get-pip.py | python2
python2 -m pip install --user --upgrade pip setuptools wheel