You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The SCA job was failing because pygments 2.19.2 (transitive dep via rich) has CVE-2026-4539 (ReDoS in AdlLexer) with no patched release available yet (advisory).
Changes to .github/workflows/devsecops.yml:
Added pip install -e ".[dev]" before auditing so pip-audit scans the actual project dependency tree
Added --ignore-vuln CVE-2026-4539 with a comment linking the advisory; the ignore should be removed once pygments ships a fix
Fixed in
8369255.The SCA job was failing because
pygments 2.19.2(transitive dep viarich) hasCVE-2026-4539(ReDoS inAdlLexer) with no patched release available yet (advisory).Changes to
.github/workflows/devsecops.yml:pip install -e ".[dev]"before auditing so pip-audit scans the actual project dependency tree--ignore-vuln CVE-2026-4539with a comment linking the advisory; the ignore should be removed once pygments ships a fixOriginally posted by @Copilot in #2 (comment)