fix: qualify patched Python model and cache dependencies

2026-10-25 08:18:21 +01:00
parent 22ef8d003c
commit 30e251a593
25 changed files with 4180 additions and 240 deletions
@@ -0,0 +1,22 @@
+{
+  "startedUtc": "2026-10-25T07:11:08.705905+00:00",
+  "finishedUtc": "2026-10-25T07:11:16.481575+00:00",
+  "lockSha256": "902dee7aaf758577fed7fbd53b0161f691d598e89ffe75c6ebf375f13f6c456b",
+  "packageCount": 63,
+  "sourceQueryCount": 126,
+  "errors": [
+    {
+      "package": "torch",
+      "version": "2.13.0+cpu",
+      "provider": "pypi",
+      "httpStatus": 404,
+      "error": "HTTPError"
+    }
+  ],
+  "findingPackageCount": 0,
+  "advisoryRecords": 0,
+  "status": "INCOMPLETE",
+  "limits": "Exact lock pin queries only; public advisory metadata, no installation/resolution, exploit or reachability assessment. OSV performs upstream version matching. Missing releases are errors, not clean findings. Cross-provider aliases can overlap.",
+  "rawSummarySha256": "804a01d79bb3ba295eab59284018a2060b680307720548ffcf804536a5d66fd0",
+  "scope": "Actual63-distribution qualification image:55 application +6 exact test extras +pip/wheel. Full raw requests retained; exact vendor PyPI404 is not a clean finding."
+}