robojerk/codeql-action

Prevent accidental analysis of the get-pip.py script.

Browse source
This commit is contained in:
Chris Gavin 2020-12-22 14:16:57 +00:00
parent 4d262138e1
commit b8f3d839cc
No known key found for this signature in database
GPG key ID: 07F950B80C27E4DA
1 changed files with 1 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
python-setup/install_tools.sh
View file

@ -31,8 +31,7 @@ python3 -m pip install --user pipenv
if command -v python2 &> /dev/null; then if command -v python2 &> /dev/null; then
# Setup Python 2 dependency installation tools. # Setup Python 2 dependency installation tools.
# The Ubuntu 20.04 GHA environment does not come with a Python 2 pip # The Ubuntu 20.04 GHA environment does not come with a Python 2 pip
curl https://bootstrap.pypa.io/get-pip.py --output get-pip.py curl --location --fail https://bootstrap.pypa.io/get-pip.py | python2
python2 get-pip.py
python2 -m pip install --user --upgrade pip setuptools wheel python2 -m pip install --user --upgrade pip setuptools wheel