Skip to content

Latest commit

 

History

History
81 lines (62 loc) · 3.81 KB

File metadata and controls

81 lines (62 loc) · 3.81 KB

🛠️ Troubleshooting Guide - Lab 25: Dependency Policy and Safe Upgrades

Issue: Safety or pip-audit not found

toor@ip-172-31-10-211:~/dependency-lab$ source ~/dependency-lab/python-app/venv/bin/activate
(venv) toor@ip-172-31-10-211:~/dependency-lab$ cd ~/dependency-lab/python-app
(venv) toor@ip-172-31-10-211:~/dependency-lab/python-app$ python3 -m pip install -r requirements-dev.txt
Requirement already satisfied: Flask==2.3.3 in ./venv/lib/python3.12/site-packages (from -r requirements.txt (line 1)) (2.3.3)
Requirement already satisfied: requests==2.31.0 in ./venv/lib/python3.12/site-packages (from -r requirements.txt (line 2)) (2.31.0)
Requirement already satisfied: Werkzeug==2.3.7 in ./venv/lib/python3.12/site-packages (from -r requirements.txt (line 3)) (2.3.7)
Requirement already satisfied: pytest==8.2.2 in ./venv/lib/python3.12/site-packages (from -r requirements-dev.txt (line 2)) (8.2.2)
Requirement already satisfied: pytest-cov==5.0.0 in ./venv/lib/python3.12/site-packages (from -r requirements-dev.txt (line 3)) (5.0.0)
Requirement already satisfied: safety==3.2.8 in ./venv/lib/python3.12/site-packages (from -r requirements-dev.txt (line 4)) (3.2.8)
Requirement already satisfied: pip-audit==2.7.3 in ./venv/lib/python3.12/site-packages (from -r requirements-dev.txt (line 5)) (2.7.3)
Requirement already satisfied: PyYAML==6.0.2 in ./venv/lib/python3.12/site-packages (from -r requirements-dev.txt (line 6)) (6.0.2)
Requirement already satisfied: packaging==24.1 in ./venv/lib/python3.12/site-packages (from -r requirements-dev.txt (line 7)) (24.1)

Issue: Tests fail to import app module

(venv) toor@ip-172-31-10-211:~/dependency-lab/python-app$ cd ~/dependency-lab/python-app
(venv) toor@ip-172-31-10-211:~/dependency-lab/python-app$ pytest tests/ -v
============================= test session starts ==============================
platform linux -- Python 3.12.3, pytest-8.2.2, pluggy-1.5.0 -- /home/toor/dependency-lab/python-app/venv/bin/python3
collected 4 items

tests/test_app.py::test_health_check PASSED
tests/test_app.py::test_fetch_data PASSED
tests/test_app.py::test_fetch_data_error_handling PASSED
tests/test_app.py::test_dependency_versions PASSED

============================== 4 passed in 0.40s ===============================

Issue: npm audit shows vulnerabilities

toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ cd ~/dependency-lab/nodejs-app
toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ npm audit fix
changed 9 packages, and audited 354 packages in 6s

47 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

Note that the lab advises reviewing breaking changes carefully before automatic fixes.

Issue: Permission denied on scripts

toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ chmod +x ~/dependency-lab/python-app/test_upgrade.sh
toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ chmod +x ~/dependency-lab/python-app/upgrade_workflow.py
toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ chmod +x ~/dependency-lab/python-app/check_dependencies.py
toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ chmod +x ~/dependency-lab/generate_report.sh
toor@ip-172-31-10-211:~/dependency-lab/nodejs-app$ ls -l ~/dependency-lab/python-app/test_upgrade.sh ~/dependency-lab/python-app/upgrade_workflow.py ~/dependency-lab/python-app/check_dependencies.py ~/dependency-lab/generate_report.sh
-rwxrwxr-x 1 toor toor 6959 Apr 12 12:17 /home/toor/dependency-lab/python-app/check_dependencies.py
-rwxrwxr-x 1 toor toor 2365 Apr 12 12:27 /home/toor/dependency-lab/python-app/test_upgrade.sh
-rwxrwxr-x 1 toor toor 8076 Apr 12 12:33 /home/toor/dependency-lab/python-app/upgrade_workflow.py
-rwxrwxr-x 1 toor toor 1138 Apr 12 12:42 /home/toor/dependency-lab/generate_report.sh