Python Vulnerability Checks
Tools for checking vulnerabilities in Python code.
Safety - Dependency Scanner
1# Install
2pip install safety
3
4# Scan the project (Safety 3+: `safety check` is deprecated;
5# `safety scan` needs a free Safety account β `safety auth login`)
6safety scan
7
8# No account? Use pip-audit (below): pip-audit -r requirements.txt
9
10# JSON output
11safety scan --output json
Bandit - Static Security Analysis
1# Install
2pip install bandit
3
4# Scan directory
5bandit -r ./myproject
6
7# Output formats
8bandit -r ./myproject -f json -o report.json
9bandit -r ./myproject -f html -o report.html
10
11# Exclude directories
12bandit -r ./myproject -x ./tests,./venv
Pip-audit
1# Install
2pip install pip-audit
3
4# Audit installed packages
5pip-audit
6
7# Audit requirements file
8pip-audit -r requirements.txt
9
10# Fix vulnerabilities
11pip-audit --fix
CI/CD Integration
1# GitHub Actions
2name: Security Scan
3
4on: [push, pull_request]
5
6jobs:
7 security:
8 runs-on: ubuntu-latest
9 steps:
10 - uses: actions/checkout@v3
11
12 - name: Set up Python
13 uses: actions/setup-python@v4
14 with:
15 python-version: '3.11'
16
17 - name: Install dependencies
18 run: pip install safety bandit pip-audit
19
20 - name: Run Safety
21 run: safety scan
22 env:
23 SAFETY_API_KEY: ${{ secrets.SAFETY_API_KEY }}
24
25 - name: Run Bandit
26 run: bandit -r .
27
28 - name: Run pip-audit
29 run: pip-audit
Related Snippets
- C/C++ Code Smells
Common code smells in C/C++ and how to fix them. Memory Leaks 1// β Bad 2void β¦ - C/C++ Secure Coding
Secure coding practices for C/C++ applications. Buffer Overflow Prevention 1// β β¦ - C/C++ Vulnerability Checks
Tools for checking vulnerabilities in C/C++ code. Valgrind 1# Install 2sudo apt β¦ - Common Antipatterns
Common software antipatterns to avoid across all languages and architectures. β¦ - Common Code Smells
Common code smells to watch for during code reviews with examples and fixes. β¦ - Developer Pre-Submission Checklist
Comprehensive checklist for developers before submitting a pull request. Code β¦ - Go Code Smells
Common code smells in Go and how to fix them. Ignoring Errors 1// β Bad 2result, β¦ - Go Secure Coding
Secure coding practices for Go applications. SQL Injection Prevention 1// β β¦ - Go Vulnerability Checks
Tools for checking vulnerabilities in Go code. Govulncheck 1# Install 2go β¦ - Haskell Code Smells
Common code smells in Haskell and how to fix them. Partial Functions 1-- β Bad: β¦ - Haskell Secure Coding
Secure coding practices for Haskell applications. SQL Injection Prevention 1-- β β¦ - Haskell Vulnerability Checks
Tools for checking vulnerabilities in Haskell code. Cabal Outdated 1# Check β¦ - Python Code Smells
Common code smells in Python and how to fix them. Mutable Default Arguments 1# β β¦ - Python Secure Coding
Secure coding practices for Python applications. SQL Injection Prevention 1# β β¦ - Reviewer Checklist
Comprehensive checklist for code reviewers to ensure thorough and constructive β¦ - Rust Code Smells
Common code smells in Rust and how to fix them. Unwrap/Expect Abuse 1// β Bad β¦ - Rust Secure Coding
Secure coding practices for Rust applications. SQL Injection Prevention 1// β β¦ - Rust Vulnerability Checks
Tools for checking vulnerabilities in Rust code. Cargo Audit 1# Install (the β¦ - TypeScript Code Smells
Common code smells in TypeScript and how to fix them. Using any 1// β Bad β¦ - TypeScript Secure Coding
Secure coding practices for TypeScript applications. XSS Prevention 1// β β¦ - TypeScript Vulnerability Checks
Tools for checking vulnerabilities in TypeScript/JavaScript code. npm audit 1# β¦