search

mandiant / capa

The FLARE team's open-source tool to identify capabilities in executable files.
https://mandiant.github.io/capa/
Apache License 2.0
4.11k stars 514 forks source link

Use pip-audit to scan Python dependencies for known vulnerabilities #1131

Open mr-tz opened 2 years ago

mr-tz commented 2 years ago

https://github.com/trailofbits/gh-action-pip-audit

williballenthin commented 1 year ago

current status:

image

which leads to this very long issue: https://github.com/pytest-dev/py/issues/287

once pytest can release an update (or the CVE and other metadata is yanked) then I think we should add this.