What about this

Author: JosiahOne

.github/workflows/endor.yml

@@ -13,15 +13,17 @@ jobs:
       issues: write # Required to automatically comment on PRs for new policy violations
       pull-requests: write # Required to automatically comment on PRs for new policy violations
     env:
-      ENDOR_SCAN_ENABLE_UV_PACKAGE_MANAGER: true
+      ENDOR_SCAN_ENABLE_UV_PACKAGE_MANAGER: false
     runs-on: ubuntu-latest
     steps:
     - name: Checkout Repository
       uses: actions/checkout@v3
     - name: Install pre-reqs
       run: pip install --user uv
-    - name: Install dependencies # endorctl does not seem to automatically do this
-      run: uv sync --locked --no-dev --no-editable
+    - name: Generate requirements.txt
+      run: uv export
+    - name: Install
+      run: pip install -r requirements.txt
     - name: Endor Labs Scan Pull Request
       if: github.event_name == 'pull_request'
       uses: endorlabs/github-action@v1.1.12 # Endor uses immutable releases so hash pinning not required