https://pantsbuild.org/ logo
a

ambitious-actor-36781

02/13/2023, 2:46 AM
Any suggestions on how to generate a
Pipfile.lock
for a given target? The pex lockfile seems similar, but not exactly the same.
e

enough-analyst-54434

02/13/2023, 2:52 AM
If you're on new enough Pants you can
./pants package
the target, then run
PEX_TOOLS=1 the.pex venv right/here --pip
Then Pip install what you need in that venv to generate the lock with? If you can create a Pipfile.lock that way.
I don't speak Pipfile so this is a wild guess
a

ambitious-actor-36781

02/13/2023, 2:55 AM
yeah, i think pipfiles are a pipenv thing. which is yet another tool to do the same thing.
e

enough-analyst-54434

02/13/2023, 2:59 AM
Is this for real use or indirect use by a security scanner?
a

ambitious-actor-36781

02/13/2023, 3:00 AM
ahah ding. Veracode only supports pipfile.lock to do SCA
e

enough-analyst-54434

02/13/2023, 3:01 AM
Right. I think @dry-analyst-73584 is working in this area and may or may not have progress or just more info on her direction for you tomorrow.
👌 1
5 Views