Malicious packages not being reported in Copilot Chat

[danbarr]

Describe the issue

Starting with v0.1.6, malicious/deprecated packages are not being reported by CodeGate via Copilot Chat. Copilot Explain is reporting them as expected, and Continue chat is also fine.

With v0.1.5:

---

Starting in v0.1.6:

Steps to Reproduce

Ask Copilot Chat to explain or review a file with a malicious package reference, for example https://github.com/stacklok/codegate-demonstration/blob/main/python/fabric.py

Operating System

MacOS (Arm)

IDE and Version

VS Code 1.96.3

Extension and Version

Copilot 1.257.0

Provider

GitHub Copilot

Model

GPT-4

Logs

No response

Additional Context

No response

[lukehinds]

Do you know if this is still on 0.1.7 @danbarr ?

[danbarr]

@lukehinds Yes I am still able to reproduce on 1.0.7 when starting from a fresh chat session.

[jhrozek]

@danbarr I think this got fixed today by one of @yrobla 's patches. We should get a release out