build(deps): Move setuptools to requirements.txt (from dev reqs) (#4291)

* build(deps): Move setuptools from dev-requirements.txt to requirements.txt * fix: correct entry for setuptools --------- Co-authored-by: Terri Oda <terri.oda@intel.com>
intel · Jul 30, 2024 · c442751 · c442751
1 parent 58ba0b7
commit c442751
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 1 deletion.
diff --git a/dev-requirements.txt b/dev-requirements.txt
@@ -22,4 +22,3 @@ types-PyYAML
 types-requests
 types-setuptools
 types-toml
-setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/requirements.csv b/requirements.csv
@@ -24,3 +24,4 @@ anthonyharrison_not_in_db,lib4sbom
 anthonyharrison_not_in_db,lib4vex
 the_purl_authors_not_in_db,packageurl-python
 h2non,filetype
+python,setuptools
diff --git a/requirements.txt b/requirements.txt
@@ -19,6 +19,7 @@ pyyaml>=5.4
 requests>=2.32.0
 rich
 rpmfile>=1.0.6
+setuptools>=65.5.1 # pinned by Snyk to avoid a vulnerability
 toml; python_version < "3.11"
 urllib3>=1.26.5 # dependency of requests added explictly to avoid CVEs
 xmlschema