nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool
GNU General Public License v2.0
6.72k stars 1.06k forks source link

Make Azure/cloud specific dependencies and functionality optional #1401

Open elliottb303 opened 2 years ago

elliottb303 commented 2 years ago

Is your feature request related to a problem? Please describe.

Potential package bloat due to MS and multi-cloud dependencies; vulnerabilities

A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

When installing Scout suite, appearing 75% or more of dependencies were for Azure/GCP/Alibaba APIs, which I won't use for this install. Eventually, if there are 10 different cloud providers, including all clouds will become unmanageable

A clear and concise description of what you want to happen.

Publish optional versions or installs with cloud specific options

A clear and concise description of any alternative solutions or features you've considered.

Looked at branches and did not see any clear cloud specific option

Add any other context or screenshots about the feature request here.

elliottb303 commented 2 years ago

Looks like just boto3-1.21.2 and botocore-1.24.2 were AWS specific dependencies. Between Alibaba, GCP and Azure, looks like 30+ other dependencies were pulled down

elliottb303 commented 2 years ago

933