2 ms·
In the meanwhile you can use a combination of pre-commit (http://pre-commit.com/ http://pre-commit.com/) and safety-db (https://github.com/pyupio/safety-db http
by Dunedan 9y ago
In the meanwhile you can use a combination of pre-commit (http://pre-commit.com/ http://pre-commit.com/) and safety-db (https://github.com/pyupio/safety-db https://github.com/pyupio/safety-db) in form of https://github.com/Lucas-C/pre-commit-hooks-safety https://github.com/Lucas-C/pre-commit-hooks-safety
That allows you to run a check for vulnerable packages before each commit and via CI.
- nerdwaller 9y agoAlso for python `pipenv check`[0] to do security checks (obviously for known vulnerabilities) if you use pipenv[1] to manage dependencies. [0] https://docs.pipenv.org/advanced.html#detection-of-security-vulnerabilities https://docs.pipenv.org/advanced.html#detection-of-security-... [1] https://github.com/kennethreitz/pipenv https://github.com/kennethreitz/pipenv