1. /
  3. channels
  4. /
  5. conda-forge
  6. /
  7. pip-audit
conda-forge
conda-forge
public
33.7k
A community led collection of recipes, build infrastructure and distributions for the conda package manager.
Package icon
pip-audit
v2.10.1
A tool for scanning Python environments for known vulnerabilities

Description

pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database (https://github.com/pypa/advisory-db) via the PyPI JSON API as a source of vulnerability reports.

This project is developed by Trail of Bits with support from Google. This is not an official Google product.

Features

  • Support for auditing local environments and requirements-style files
  • Support for multiple vulnerability services (PyPI, OSV)
  • Support for emitting SBOMs in CycloneDX XML or JSON
  • Human and machine-readable output formats (columnar, JSON)
  • Seamlessly reuses your existing local pip caches

Install package

If this channel isn't in your workspace yet, add it first:

pixi workspace channel add --prepend https://prefix.dev/conda-forge

Then install the package:

pixi add pip-audit

Download counts

Loading chart data...

Version

2.10.1

License

Platforms

noarch

Last Published

2 months ago

Feedstock

Homepage

Dev

Documentation

Open Pull Requests

  •  
  •  
  •  
pip-audit - conda-forge