ܖi dZddlmZddlZddlZddlZddlmZddlm Z ddl m Z m Z m Z ddlmZddlmZd d lmZd d lmZmZej.eZGd d ej4ZGddeZy)z[ Create virtual environments with a custom set of packages and inspect their dependencies. ) annotationsN)Iterator)PathLike)NamedTemporaryFileTemporaryDirectory gettempdir)SimpleNamespace)Version) AuditState)CalledProcessErrorrunc|eZdZdZdgef dfd Zd fd Zd dZed dZ ed dZ xZ S) VirtualEnva A wrapper around `EnvBuilder` that allows a custom `pip install` command to be executed, and its resulting dependencies inspected. The `pip-audit` API uses this functionality internally to deduce what the dependencies are for a given requirements file since this can't be determined statically. The `create` method MUST be called before inspecting the `installed_packages` property otherwise a `VirtualEnvError` will be raised. The expected usage is: ``` # Create a virtual environment and install the `pip-api` package. ve = VirtualEnv(["pip-api"]) ve.create(".venv/") for (name, version) in ve.installed_packages: print(f"Installed package {name} ({version})") ``` Nclt|d||_||_||_d|_||_y)a Create a new `VirtualEnv`. `install_args` is the list of arguments that would be used the custom install command. For example, if you wanted to execute `pip install -e /tmp/my_pkg`, you would create the `VirtualEnv` like so: ``` ve = VirtualEnv(["-e", "/tmp/my_pkg"]) ``` `index_url` is the base URL of the package index. `extra_index_urls` are the extra URLs of package indexes. `state` is an `AuditState` to use for state callbacks. T)with_pipN)super__init__ _install_args _index_url_extra_index_urls _packages_state)self install_args index_urlextra_index_urlsstate __class__s Z/var/www/html/content-pipeline/venv/lib/python3.12/site-packages/pip_audit/_virtual_env.pyrzVirtualEnv.__init__,s:. $')#!1;? cp t||S#t$rt}t d|dwxYw)z2 Creates the virtual environment. z0Couldn't execute in a temporary directory under z. This is sometimes caused by a noexec mount flag or other setting. Consider changing this setting or explicitly specifying a different temporary directory via the TMPDIR environment variable.)rcreatePermissionErrorrVirtualEnvError)renv_dir base_tmpdirrs r r#zVirtualEnv.createJsP  7>'* * %,K!B;-PKK  s#5c |jjd|jdddddddg} t||j|jjd t 5}t|d 5}|jdddddg|jdd|j|j} t|d|j|jjdtj|}|d}g|_|D]3} | d} |j j#| dt%| df5 d d d d d d y #t$r}t d ||d }~wwxYw#t$r6}tjd|jt d||d }~wwxYw#1swYtxYw#1swYy xYw)ac Install the custom package and populate the list of installed packages. This method is overridden from `EnvBuilder` to execute immediately after the virtual environment has been created and should not be called directly. We do a few things in our custom post-setup: - Upgrade the `pip` version. We'll be using `pip list` with the `--format json` option which requires a non-ancient version for `pip`. - Install `wheel`. When our packages install their own dependencies, they might be able to do so through wheels, which are much faster and don't require us to run setup scripts. - Execute the custom install command. - Call `pip list`, and parse the output into a list of packages to be returned from when the `installed_packages` property is queried. z1Updating pip installation in isolated environmentz-mpipinstallz --upgradewheel setuptools)rzFailed to upgrade `pip`: Nz*Installing package in isolated environmentF)dirdeletez --no-inputz--keyring-provider=subprocessz --dry-runz--reportT) log_stdoutrzinternal pip failure: zFailed to install packages: z1Processing package list from isolated environmentmetadatanameversion)r update_stateenv_exerr r%rr_index_url_argsr1rloggererrorstderrjsonloadrappendr ) rcontextpip_upgrade_cmdcpeve_dirtmppackage_install_cmdinstall_report package_listpackagepackage_metadatas r post_setupzVirtualEnv.post_setupds "   !TU OO          Z t{{ 3   !MN  !+ V-?FSX-Y+ ]`/ #%% # # # ### #  e'D L KK $ $%X Y!YYs^N))4L DN' #*:#6 %%%f-w7G 7R/ST O+ + +  " Z!$=o=N"OPVY Y Z@& e 5cjj\BC%(DEXDY&Z[add e7+ + + + s`E-G;;F77E5A4F7G E2E--E25 F4>1F//F44F77G <GG c#fK|j td|jEd{y7w)z A property to inspect the list of packages installed in the virtual environment. This method can only be called after the `create` method has been called. NzcInvalid usage of wrapper.The `create` method must be called before inspecting `installed_packages`.)rr%)rs r installed_packageszVirtualEnv.installed_packagess4 >> !!]  >>!!s '1/1cg}|jr|jd|jg|jD]}|jd|g|S)Nz --index-urlz--extra-index-url)rextendr)rargsrs r r5zVirtualEnv._index_url_argssO ?? KK8 9// :I KK,i8 9 : r!)r list[str]rz str | NonerrLrr )r&z-str | bytes | PathLike[str] | PathLike[bytes]returnNone)r<r rMrN)rMzIterator[tuple[str, Version]])rMrL) __name__ __module__ __qualname____doc__r rr#rFpropertyrHr5 __classcell__)rs@r rrst.!%&(&L $   <4Sj " "r!rceZdZdZy)r%zZ Raised when `VirtualEnv` fails to build or inspect dependencies, for any reason. N)rOrPrQrRr!r r%r%s  r!r%)rR __future__rr9loggingvenvcollections.abcrosrtempfilerrrtypesr packaging.versionr rr _subprocessr r getLoggerrOr6 EnvBuilderr Exceptionr%rVr!r rcsa#  $GG!%0   8 $xxv i r!