pypa / gh-action-pip-auditLinks
A GitHub Action for pip-audit
β81Updated last week
Alternatives and similar repositories for gh-action-pip-audit
Users that are interested in gh-action-pip-audit are comparing it to the libraries listed below
Sorting:
- A Sigstore client written in Pythonβ305Updated last week
- π΅οΈ File browser for distributions on PyPIβ110Updated last month
- A GitHub Action for sigstore-pythonβ63Updated this week
- Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.β132Updated 6 months ago
- This is a repository of vulnerability advisories for projects in scope for the Python Software Foundation CVE Numbering Authority (CNA)β38Updated last week
- Update GitHub Actions version pins in GitHub workflow files.β38Updated 5 months ago
- Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure.β174Updated last month
- Advisory database for Python packages published on pypi.orgβ313Updated 2 weeks ago
- python dependency vulnerability scanner, written in Rust.β206Updated 4 months ago
- Data about packages and maintainers on PyPIβ129Updated 3 months ago
- Software Bill-of-Materials documents for Python packagesβ44Updated 10 months ago
- Automatically updated pypi API data, available in bulk via git or sqliteβ78Updated this week
- π Drop-in replacement for Click to make user-friendly and colorful CLIβ98Updated this week
- A dictionary attack tool for PostgreSQL and MSSQLβ37Updated 3 years ago
- Python Faker provider for security related dataβ40Updated 4 months ago
- A parser for Python dependency filesβ65Updated last year
- Fetches security vulnerabilities and creates pip-constraints based on them.β12Updated 11 months ago
- π PyPI package information at a glance for Python dependencies β a VS Code extensionβ36Updated last month
- A tool to generate a SBOM (Software Bill of Materials) for an installed Python moduleβ37Updated 2 months ago
- A pre-commit hook to check your Python dependencies against safety-dbβ99Updated last month
- Action to have pip install from a requirements file as securely as possibleβ41Updated 3 years ago
- A decorator to aid in annotating logs for easier reading and searchingβ94Updated last week
- CLI to show end-of-life dates for a number of products.β136Updated 2 weeks ago
- next.js website powering https://py-code.org/β32Updated last year
- Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerβ¦β57Updated last week
- a mostly correct pip requirements parsing libraryβ21Updated last year
- Verify certificates using OS trust storesβ212Updated last month
- Simple, composable command runner for Python projectsβ36Updated 2 weeks ago
- β13Updated 2 years ago
- Validation library for simple check on `pyproject.toml`β195Updated last week