snyk-python-plugin v2.1.1

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

Support

• ❌ Not supported
• ❓ No issues expected but not regularly tested
• ✅ Supported and verified with tests

Supported OS

Supported Node versions

Supported Pip & Python versions (requirements.txt)

Supported Poetry versions (pyproject.toml and poetry.lock)

All known versions are expected to be supported (current latest version is 1.1.6)

Snyk Python CLI Plugin

This plugin provides dependency metadata for Python projects that use one of the following dependency management methods:

• pip with a requirements.txt file
• pipenv with a Pipfile file
• poetry with pyproject.toml and poetry.lock

There's a special only-provenance mode that allows extracting of top-level dependencies with their corresponding positions in the original manifest file.

Contributing

Guide

Developing and Testing

Prerequisites:

• Node.js 10+
• Python 2.7 or 3.6+
• Installed outside of any virtualenv:
  • pip
  • the contents of dev-requirements.txt:

    pip install --user -r dev-requirements.txt

• if in linux, python-dev installed with apt, or see here.

Tests can be run against multiple python versions by using tox:

pip install tox
tox

Linting and testing:

npm i
npm run lint
npm run test