🛡️ Sentinel: [MEDIUM] Fix missing input validation on external JSON data - #409

The `python-version` input is not set. The version of Python currently in `PATH` will be used.

Snapshot successfully created at 2026-02-20T11:02:14.475Z

{ "manifests": { "requirements.txt": { "resolved": { "pkg:pypi/anyio@4.12.1": { "package_url": "pkg:pypi/anyio@4.12.1", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/typing-extensions@4.15.0": { "package_url": "pkg:pypi/typing-extensions@4.15.0", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/httpx@0.28.1": { "package_url": "pkg:pypi/httpx@0.28.1", "relationship": "direct", "scope": "runtime", "dependencies": [ "pkg:pypi/anyio@4.12.1", "pkg:pypi/typing-extensions@4.15.0", "pkg:pypi/certifi@2026.1.4", "pkg:pypi/h11@0.16.0", "pkg:pypi/idna@3.11", "pkg:pypi/httpcore@1.0.9" ] }, "pkg:pypi/certifi@2026.1.4": { "package_url": "pkg:pypi/certifi@2026.1.4", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/h11@0.16.0": { "package_url": "pkg:pypi/h11@0.16.0", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/idna@3.11": { "package_url": "pkg:pypi/idna@3.11", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/httpcore@1.0.9": { "package_url": "pkg:pypi/httpcore@1.0.9", "relationship": "indirect", "scope": "runtime", "dependencies": [] }, "pkg:pypi/python-dotenv@1.2.1": { "package_url": "pkg:pypi/python-dotenv@1.2.1", "relationship": "direct", "scope": "runtime", "dependencies": [] } }, "name": "requirements.txt", "file": { "source_location": "requirements.txt" } } }, "version": 0, "job": { "correlator": "submit-pypi", "id": "22221537752" }, "sha": "30cab3ad7300dd69435f1f1b9c104f6efe67452b", "ref": "refs/heads/sentinel-validation-fix-13083465383994297818", "scanned": "2026-02-20T11:02:14.196Z", "detector": { "name": "Automatic Dependency Submission", "version": "0b8e67cacb3b", "url": "https://github.com/actions/component-detection-dependency-submission-action" } }

Submitting snapshot...

Using pip-compile version: pip-compile, version 7.5.3

Using pip version: pip 24.0 from /usr/lib/python3/dist-packages/pip (python 3.12)