Add dependency vulnerability scanning

Open

#607 opened on Jul 27, 2026 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 3/5
Estimated time: 1-2 days
Newbie friendliness: 65/100

Issue type: Feature
Clarity: Mostly clear
Activity status: Quiet
Tech stack: github-actions, python
Domain: ci-cd, security

Research direction

Start by locating the repository's CI workflow and Python dependency configuration. Compare the official pypa/pip-audit GitHub Action with adding pip-audit as a development dependency and running it manually. Done means dependency vulnerability scanning runs during CI and reports known CVEs.

Written by the indexing model from the issue text.

Description

enhancement general

Context & Motivation

To improve project security, we should automatically scan our Python dependencies for known CVEs during CI. Integrating pip-audit prevents using dependencies with known vulnerabilites.

Proposed Change

Integrate pip-audit into the repository. We can include this by using one of the two following approaches:

Integrate the official standalone GitHub Action into our CI workflow (pypa/pip-audit)
Add pip-auditas a dev dependency and call it manually

Dominant language: Python
Stars: 102
Forks: 52
Avg merge: 20d 17h
Merged PRs (30d): 1

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

validate-structure inspecte challenge/work/.terraform et rend faux les labs qui ont un provider en cache Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

stephrobert/dsoxlab#238 · Opened Sep 24, 2026
Uniform probability densities use the upper bound as an interval width Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

nasa/fmdtools#40 · Opened Sep 24, 2026
_common_folder() treats a single file as the common folder; single-file archives can't be installed (4.2.8) / crash (master) Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

sublimehq/package_control#1780 · Opened Sep 24, 2026
Set 'Sample' input in 'autorun.py' to utilize 'Sample' Tab in eLog Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

pcdshub/mfx#309 · 2 comments · Opened Sep 24, 2026
niri config file addition does not respect existing optional include Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

nwg-piotr/nwg-displays#145 · Opened Sep 24, 2026

More Python issues