PyScan quickly and easily scans a folder full of python packages for vulnerabilities.
Needed a way to scan Python packages for vulnerabilities as a part of a CI/CD pipeline.
To run from the commandline:
- Save the pyscan.py file to a directory of your choice
- Open and run terminal/powershell to the directory you just saved scanner.py
- Run
python pyscan.py "/path/to/python/packages"
replace the string at the end with the path to the directory with the python packages. Any packages with vulnerabilities will be deleted and a list of the packages that were deleted will be returned. Note: You can usepython -m pip download -r requirements.txt -d .
to download some test files.
- Fork it!
- Create your feature branch:
git checkout -b my-new-feature
- Commit your changes:
git commit -am 'Add some feature'
- Push to the branch:
git push origin my-new-feature
- Submit a pull request :D
23/02/21: V1 Initial release
- Template for this README is Template-README created by Zain Khan
- The actual vulnerability scanner used for this project is Safety created by pyup
See the LICENSE file in this project's directory.