Description
Issue description
When I run pipenv requirements with an index-url specified in the pipfile according to this page in the docs, pipenv reveals the credentials in the requirements.txt.
Expected result
I'd expect the requirements.txt to contain a reference to the environment variable, just like in the Pipfile.lock.
Actual result
The credentials are clearly visible in the requirements.txt.
Steps to replicate
mkdir my_project
cd my_project
touch Pipfile
pipenv install
Add you private pypi repo to the pipfile.
pipenv requirements
Please run $ pipenv --support, and paste the results here. Don't put backticks (`) around it! The output already contains Markdown formatting.
$ pipenv --support
Pipenv version: '2022.6.7'
Pipenv location: '/anaconda/lib/python3.8/site-packages/pipenv'
Python location: '/anaconda/bin/python'
Python installations found:
3.8.10:/anaconda/bin/python33.8.10:/anaconda/bin/python3.8.10:/anaconda/bin/python3.83.6.9:/usr/bin/python3.63.6.9:/usr/bin/python3.6m3.6.9:/usr/bin/python32.7.17:/usr/bin/python22.7.17:/usr/bin/python2.72.7.17:/usr/bin/python
PEP 508 Information:
{'implementation_name': 'cpython',
'implementation_version': '3.8.10',
'os_name': 'posix',
'platform_machine': 'x86_64',
'platform_python_implementation': 'CPython',
'platform_release': '5.4.0-1068-azure',
'platform_system': 'Linux',
'platform_version': '#71~18.04.1-Ubuntu SMP Thu Jan 20 08:21:40 UTC 2022',
'python_full_version': '3.8.10',
'python_version': '3.8',
'sys_platform': 'linux'}
System environment variables:
CONDA_SHLVLMSI_ENDPOINTLS_COLORSLD_LIBRARY_PATHCONDA_EXEJUPYTER_SERVER_ROOTLESSCLOSELANGAZURE_EXTENSION_DIRMSI_SECRET_JOBOLDPWDINVOCATION_IDCI_RESOURCE_GROUPNODE_PATHOBO_ENDPOINTCOLORTERMJUPYTER_SERVER_URLCONDA_PREFIXVSCODE_GIT_ASKPASS_EXTRA_ARGSCLASSPATHUSERAML_CloudNameCI_WORKSPACEMKL_THREADING_LAYERPWDLINESHOMECONDA_PYTHON_EXEBROWSERJOURNAL_STREAMVSCODE_GIT_ASKPASS_NODETERM_PROGRAMTERM_PROGRAM_VERSIONCUPIT_LIB_PATHXDG_DATA_DIRSDEFAULT_IDENTITY_CLIENT_IDAPPSETTING_WEBSITE_SITE_NAMEVSCODE_IPC_HOOK_CLICUDA_ROOTLIBRARY_PATHCONDA_PROMPT_MODIFIERCOLUMNSCI_NAMEVSCODE_GIT_ASKPASS_MAINSHELLTERMMSI_SECRETAZURE_ARTIFACTS_PATPYXTERM_DIMENSIONSSHLVLCI_LOCAL_UBUNTU_USERVSCODE_GIT_IPC_HANDLEMANPATHLOGNAMEMLFLOW_TRACKING_URIGIT_ASKPASSENABLE_MLFLOW_AUTOLOGPATHCONDA_DEFAULT_ENVI_MPI_ROOTLESSOPEN_PIP_SHIMS_BASE_MODULEPIP_DISABLE_PIP_VERSION_CHECKPIP_PYTHON_PATHPYTHONDONTWRITEBYTECODEPYTHONFINDER_IGNORE_UNSUPPORTED
Pipenv–specific environment variables:
Debug–specific environment variables:
Contents of Pipfile:
[[source]]
url = "https://user:${AZURE_ARTIFACTS_PAT}@pkgs.dev.azure.com/my-project/pypi/simple/"
verify_ssl = true
name = "my-stream"
[packages]
my-package = "*"
[dev-packages]
[requires]
python_version = "3.8.10"
Contents of Pipfile.lock:
{
"_meta": {
"hash": {
"sha256": "3349f2aaf4cd14ce1860f4c6971a3b3b4f0971f8ea30da5919c2542386512c28"
},
"pipfile-spec": 6,
"requires": {
"python_version": "3.8.10"
},
"sources": [
{
"name": "my-stream",
"url": "https://user:${AZURE_ARTIFACTS_PAT}@pkgs.dev.azure.com/my-project/pypi/simple/",
"verify_ssl": true
}
]
},
"default": {
"my-package": {
"hashes": [
"sha256:c49c1166e35955b2f817bca7f2f9a0854b5995a8f8173e1dc525024475f4756e",
"sha256:e4345b3f508c33f582ab59e9f69707bc8f764c96ea5434e9adbfc344cd1aee80"
],
"index": "my-package",
"version": "==0.1.6"
},
"develop": {}
}