sbomify PyPI TEA Start free

SBOM for pytest-mergify 2026.11.5

Pytest plugin for Mergify

CycloneDX PEP 740 attested 5 known vulnerabilities
Requires Python
>=3.10
PyPI
pytest-mergify 2026.11.5
Flaky tests guide
https://mergify.com/learn/flaky-tests/pytest
Homepage
https://docs.mergify.com/test-engine/test-frameworks/pytest/
Issues
https://github.com/Mergifyio/mergify-cli/issues

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

pytest_mergify-2026.11.5-cp310-abi3-macosx_10_12_x86_64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

pytest_mergify-2026.11.5-cp310-abi3-macosx_11_0_arm64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

pytest_mergify-2026.11.5-cp310-abi3-manylinux_2_28_aarch64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

pytest_mergify-2026.11.5-cp310-abi3-manylinux_2_28_x86_64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

pytest_mergify-2026.11.5-cp310-abi3-musllinux_1_2_aarch64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

pytest_mergify-2026.11.5-cp310-abi3-musllinux_1_2_x86_64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

pytest_mergify-2026.11.5-cp310-abi3-win_amd64.whl

Attested
Publisher: GitHub Source: Mergifyio/mergify-ci-integrations Workflow: release-pytest-mergify.yml Environment: release
pytest-mergify.cyclonedx.json
CycloneDX/1.5 application/vnd.cyclonedx+json 5 known vulnerabilities
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
RUSTSEC-2026-0340
Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
 High 7.5 quinn-proto 0.11.16
crates.io
 0.11.18
RUSTSEC-2026-0341
Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed
 High 7.5 quinn-proto 0.11.16
crates.io
 0.11.17
RUSTSEC-2026-0338
Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
 Unknown quinn-proto 0.11.16
crates.io
 0.11.18
RUSTSEC-2026-0339
Unbounded growth of pending connection ID retirements in quinn-proto
 Unknown quinn-proto 0.11.16
crates.io
 0.11.17
RUSTSEC-2026-0342
Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto
 Unknown quinn-proto 0.11.16
crates.io
 0.11.17

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]