From 6ef471c3338f6611bf7d6ab8fb3405ea56b77cac Mon Sep 17 00:00:00 2001
From: bikegeek <minnawin@ucar.edu>
Date: Thu, 2 Feb 2023 13:11:03 -0700
Subject: [PATCH] #310 try using a virtual env and use only local to avoid
 system packages

---
 .github/workflows/vulnerabilities.yaml | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/vulnerabilities.yaml b/.github/workflows/vulnerabilities.yaml
index 8e00f63d..6cca816d 100644
--- a/.github/workflows/vulnerabilities.yaml
+++ b/.github/workflows/vulnerabilities.yaml
@@ -37,8 +37,12 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: install
-        run: python -m pip install .
+        run: |
+          python -m venv env/
+          source env/bin/activate
+          python -m pip install .
       - uses: pypa/gh-action-pip-audit@v1.0.5
         with:
           inputs: requirements.txt
-          no-deps: true
+          virtual-environment: env/
+          local: true