The latest `setuptools` version pulls in a `jaraco.context` version that triggers a Trivy scan failure. `jaraco.context` has a path traversal vulnerability. This fix is inspired by suitenumerique/people, specifically Marie’s PR #1010.
3.4 KiB
3.4 KiB