Repository navigation
Patch release fixing scanner dependency version detection on Windows.
Closes #2.
Important packaging note:
- Operators should download
Scan-PythonPackages_v1.6.1.zip, not a standalone.ps1file. - The release zip contains both required runtime files:
Scan-PythonPackages.ps1andinspect_binary.py. inspect_binary.pymust remain besideScan-PythonPackages.ps1; otherwise native PE/ELF binary inspection is skipped.
Fixed:
Get-InstalledPackageVersionnow uses the scanner venv Python executable withpython -m pip showwhen checking installed scanner dependency versions.- This avoids a Windows
pip.exewrapper failure mode after pip upgrades itself inside an existing.scan-venv. - Existing scanner venvs no longer need to be deleted just to recover from the false
bandit is not installed/version check failedpath.
Changed:
- Scanner version metadata updated to
1.6.1. - JSON report
scannerVersionupdated to1.6.1. - Changelog, README release-note pointer, fixture metadata, and v1.6.1 release notes updated.
Verification:
- Local fixture generation: passed.
- Local Pester: 51 passed, 0 failed.
- Added regression coverage for a broken
pip.exewrapper with successfulpython -m pip show banditoutput.
Zip SHA256:
A02DE18DB306095DF28DB7E1803CDD6916597C0023D90D7CF5F042BBDE937D51