CVE-2018-1000656

pysnyk A Python client for the Snyk API Client Using the client requires you to provide your Snyk API token import snyk client = snykSnykClient("<your-api-token>") By default the client will connect to the public Snyk service If you are using a local installation then you can provide the API url as the second a

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities It uses the Python Packaging Advisory Database (githubcom/pypa/advisory-database) via the PyPI JSON API as a source of vulnerability reports This project is maintained in part by Trail of Bits with support from Google This is not an official Google or Trail o

pysnyk A Python client for the Snyk API Client Using the client requires you to provide your Snyk API token import snyk client = snykSnykClient("<your-api-token>") By default the client will connect to the public Snyk service If you are using a local installation then you can provide the API url as the second a

A Python client for the Snyk API.

pysnyk A Python client for the Snyk API Client Using the client requires you to provide your Snyk API token import snyk client = snykSnykClient("<your-api-token>") By default the client will connect to the public Snyk service If you are using a local installation then you can provide the API url as the second a

This program displays security advisories of open-sources packages your project uses no matter which GIT or CICD solution you use.

Loki Open Source Scanner (work in progress) This program that displays security advisories for a given dependencies file leveraging GitHub's Security Advisory API For ad-hod advisory look-ups: githubcom/advisories About the name Through his cunning, Loki helped the Aesir (Northern Gods) in difficult situations In Norse mythology Loki is the son of giants and

A CLI tool for interacting with the Snyk API.

Snykctl A command line tool for interacting with the Snyk API Installation Precompiled executables are available Linux and macOS environments These are available from Releases You can grab those quickly with wget like so for Linux: wget -o snykctl githubcom/garethr/snykctl/releases/download/v020/snykctl_v020_linux-amd64 chmod +x snykctl

Audits Python environments and dependency trees for known vulnerabilities

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities It uses the Python Packaging Advisory Database (githubcom/pypa/advisory-database) via the PyPI JSON API as a source of vulnerability reports This project is maintained in part by Trail of Bits with support from Google This is not an official Google or Trail o

Audits Python environments and dependency trees for known vulnerabilities

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities It uses the Python Packaging Advisory Database (githubcom/pypa/advisory-database) via the PyPI JSON API as a source of vulnerability reports This project is maintained in part by Trail of Bits with support from Google This is not an official Google or Trail o

A Python client for the Snyk API.

pysnyk A Python client for the Snyk API Client Using the client requires you to provide your Snyk API token import snyk client = snykSnykClient("<your-api-token>") By default the client will connect to the public Snyk service If you are using a local installation then you can provide the API url as the second a

Pulsecheck - Get current and historical vulnerability insights from the GItHub Advisory Database https://github.com/advisories/database, by checking the pulse of your project’s dependencies delivered in an easy-to-use CLI.

Pulsecheck I wrote Pulsecheck to serve as a tool for early-stage research on OSS third-party libraries and package vulnerabilities Pulsecheck parses your dependency files and queries the GitHub Advisory Database for all relevant GitHub-reviewed security advisories It will provide data on every reviewed GHSA advisory for your respective dependency This project showcases how t

A Prometheus Exporter for managing vulnerabilities in kubernetes by using trivy

Kubernetes Vulnerability Exporter A Prometheus Exporter for managing vulnerabilities in kubernetes by using trivy Abstract ! This project is under development Vulnerability exporter scan and export vulnerabilities of images and nodes in kubernetes cluster Inspirated by kube-trivy-expoter Image Scan Image Scan scans for vulnerabilities in container images of workloads deploye

pysnyk A Python client for the Snyk API Client Using the client requires you to provide your Snyk API token import snyk client = snykSnykClient("<your-api-token>") By default the client will connect to the public Snyk service If you are using a local installation then you can provide the API url as the second a