Pyscan: A command-line tool to detect security issues in your python dependencies.
🐶 immunipy: Find vulnerable dependencies in your Python projects
Vulnerability Scanning Tool
A Complete Penetration Testing & Hacking Tools List for Hackers & Security Professionals
Does your Python scanner check for vulnerabilities in third-party libraries?
Does your scanner support popular Python frameworks like Django and Flask?
Is the scanner compatible with CI/CD?
Videos
» pip install pip-audit
pyscan v0.1.6 | Github
-
can be used within large projects.
-
automatically finds dependencies either from configuration files or within source code.
-
support for poetry,hatch,filt,pdm and can be integrated into existing build processes.
-
hasn't been battle-hardened yet. PRs and issue makers welcome.
Install
pip install pyscan-rs
or
cargo install pyscan
Usage
Go to your project directory and run:
pyscan
or
pyscan -d path/to/src
I posted here about 5 months ago regarding pyscan's release, its been improving ever since but its still not there yet. It is a dependency vulnerability scanner at the moment but i'd like to expand this tool so that it could make PyPI's ecosystem a little less scary and let developers download packages without worrying about supply-chain issues. Grateful for all the support so far from the Python community.