Skip to content

Include environment in conda-deny check #10

Description

Instead of something like this

❌ The following dependencies are unsafe:

ghp-import 2.1.0-pyhd8ed1ab_0 (noarch): LicenseRef-Tumbolia-Public 
gpgme 1.18.0-h27087fc_0 (linux-64): GPL-2.1-or-later AND LGPL-2.1-or-later AND MIT (Non-SPDX)
lxml 5.3.0-py313h6b44993_1 (osx-arm64): BSD-3-Clause and MIT-CMU 
lxml 5.3.0-py313h6eb7059_1 (linux-64): BSD-3-Clause and MIT-CMU 

we could include the environment as well (if there is more than only the default environment (or we are checking a prefix))

❌ The following dependencies are unsafe:

ghp-import 2.1.0-pyhd8ed1ab_0 (noarch in default, lint): LicenseRef-Tumbolia-Public
gpgme 1.18.0-h27087fc_0 (linux-64 in default, lint): GPL-2.1-or-later AND LGPL-2.1-or-later AND MIT (Non-SPDX)
lxml 5.3.0-py313h6b44993_1 (osx-arm64 in prod): BSD-3-Clause and MIT-CMU
lxml 5.3.0-py313h6eb7059_1 (linux-64 in prod): BSD-3-Clause and MIT-CMU

We would need to think about whether we would like to add the source as well if passing multiple lockfiles or multiple prefixes... At some point there is too much output 😅

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions