CERBERUS/awesome-python
1
0
Fork 0
mirror of https://github.com/vinta/awesome-python.git synced 2026-10-21 19:22:01 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

chore: add uv supply-chain hardening and enforce locked installs

Browse source 
- Set exclude-newer to 3 days and only-binary/:all: in pyproject.toml to
  limit dependency freshness window and block source builds
- Switch uv sync to --locked in Makefile, ci.yml, and deploy-website.yml
  to enforce the lockfile rather than re-resolving on each install
- Regenerate uv.lock with exclude-newer snapshot recorded

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Vinta Chen 2026-04-22 02:21:48 +08:00
parent 99d883c00d
commit 0bf9522e5d
No known key found for this signature in database
GPG key ID: B93DE4F003C33630
5 changed files with 14 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
pyproject.toml
View file

@ -29,3 +29,10 @@ pythonpath = ["website"]
[tool.ruff]
line-length = 200
[tool.uv]
exclude-newer = "3 days"
no-build = true
[tool.uv.pip]
only-binary = [":all:"]