chainguard-dev / malcontent

#supply #chain #attack #detection
Apache License 2.0
446 stars 31 forks source link

Improve Python detection based on the PyPI malregistry #584

Closed tstromberg closed 1 week ago

tstromberg commented 1 week ago

Basically, I banged on malcontent until it matched more and more of https://github.com/lxyeternal/pypi_malregistry

This included adding support for ".whl" (Python Wheel) files, which are just zip files by another name.

egibs commented 1 week ago

@tstromberg -- I went ahead and updated the test data to get this merged.