Fix CI: use Python-versioned get-pip URL (node image has 3.9).
Some checks failed
CI / skip-ci-check (pull_request) Successful in 7s
CI / lint-and-test (pull_request) Successful in 12s
CI / ansible-validation (pull_request) Failing after 18s
CI / secret-scanning (pull_request) Successful in 6s
CI / dependency-scan (pull_request) Successful in 14s
CI / sast-scan (pull_request) Successful in 19s
CI / license-check (pull_request) Successful in 12s
CI / vault-check (pull_request) Failing after 14s
CI / playbook-test (pull_request) Failing after 14s
CI / container-scan (pull_request) Successful in 6s
CI / sonar-analysis (pull_request) Failing after 3s
CI / workflow-summary (pull_request) Successful in 5s

Default get-pip.py requires Python 3.10+; bullseye node image ships 3.9.2.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
ilia 2026-05-22 21:38:48 -04:00
parent 08d5cb4073
commit dfed055e7c

View File

@ -93,7 +93,8 @@ jobs:
- name: Bootstrap pip (no apt — act runner hits bullseye GPG errors)
run: |
python3 --version
curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
PY=$(python3 -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')
curl -fsSL "https://bootstrap.pypa.io/pip/${PY}/get-pip.py" -o /tmp/get-pip.py
python3 /tmp/get-pip.py --disable-pip-version-check
python3 -m pip --version
@ -193,7 +194,8 @@ jobs:
- name: Scan Python dependencies
run: |
if [ -f requirements.txt ]; then
curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
PY=$(python3 -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')
curl -fsSL "https://bootstrap.pypa.io/pip/${PY}/get-pip.py" -o /tmp/get-pip.py
python3 /tmp/get-pip.py --disable-pip-version-check
python3 -m pip install --no-cache-dir pip-audit
python3 -m pip-audit -r requirements.txt
@ -215,7 +217,8 @@ jobs:
- name: Bootstrap pip (no apt)
run: |
python3 --version
curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
PY=$(python3 -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')
curl -fsSL "https://bootstrap.pypa.io/pip/${PY}/get-pip.py" -o /tmp/get-pip.py
python3 /tmp/get-pip.py --disable-pip-version-check
- name: Install Semgrep
@ -261,7 +264,8 @@ jobs:
- name: Bootstrap pip (no apt)
run: |
python3 --version
curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
PY=$(python3 -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')
curl -fsSL "https://bootstrap.pypa.io/pip/${PY}/get-pip.py" -o /tmp/get-pip.py
python3 /tmp/get-pip.py --disable-pip-version-check
- name: Install Ansible
@ -311,7 +315,8 @@ jobs:
- name: Bootstrap pip (no apt)
run: |
python3 --version
curl -fsSL https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py
PY=$(python3 -c 'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")')
curl -fsSL "https://bootstrap.pypa.io/pip/${PY}/get-pip.py" -o /tmp/get-pip.py
python3 /tmp/get-pip.py --disable-pip-version-check
- name: Configure CI Ansible (no vault, localhost inventory)