Pouzor 03e5ae939e ci(security): give pip-audit the same registry-outage retry as npm ...

pip-audit queries PyPI's advisory API and exits non-zero when it cannot
reach it, exactly as `npm audit` does — the same class of outage that
reddened #409 would have failed the Python half too.

Both now go through .github/scripts/audit-with-retry.sh, which retries
only when the output names a transport or availability failure and lets
a real finding fail on the first attempt, unretried. The npm loop added
in the previous commit is folded into it.

ha-relevant: no

2026-09-04 10:01:35 +02:00

..

audit-with-retry.sh

ci(security): give pip-audit the same registry-outage retry as npm

2026-09-04 10:01:35 +02:00