[Issue/Question] Support against a requirements.txt file that contains specific version pins about guarddog HOT 3 CLOSED

@christophetd i'm going to close this issue since my intention is to inject this part of the CI/CD pipeline and not necessarily have it part of the development environment. Feel free to reopen if ever this needs to be addressed. Thank you for your team's work as well!

from guarddog.

Thanks for reporting! We're using pkg_resources.parse_requirements so I would definitely expect this to work

https://github.com/DataDog/guarddog/blob/main/guarddog/scanners/package_scanner.py#L151

from guarddog.

ah! without too much detail, it seems like the issue might be with the guarddog package given that it's pulled from github...

1. add guarddog in requirements.in
2. pip-compile
   results in

...
guarddog @ git+https://github.com/DataDog/guarddog.git
    # via -r requirements.in
...

4. returns 404

If I remove guarddog dependency line from requirements.txt, everything works as expected

from guarddog.