**Original Pulp Redmine Issue: https://pulp.plan.io/issues/6872** ### Goal Users storing content in pulp_python should derive benefit from security scanning of Python packages that are out there. ### Existing Tools The idea is to integrate a tool not make a new one. Here are some options I've read about from [this article](https://pythonspeed.com/articles/docker-python-security-scan/). #### Scanning Python Code Itself - [ Bandit](https://bandit.readthedocs.io/en/latest/) - [pysa](https://pyre-check.org/docs/pysa-basics.html) #### Scanning Python Dependencies - [safety](https://pyup.io/safety/) <-- freemium model with limited updates when not paid for
Activity
fridex commentedon Mar 17, 2021