[Epic] Add security scanner integration

Open
#349 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
20/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Stale
Tech stack
python
Domain
security

Research direction

Start by reviewing the goal and the listed scanning options in this issue, then read the linked article and the Bandit, Pysa, and Safety documentation. Determine which tool and integration scope fit pulp_python; done means the selected scanner is integrated so users storing Python content can benefit from security scanning.

Written by the indexing model from the issue text.

Description

feature request help wanted

Original Pulp Redmine Issue: https://pulp.plan.io/issues/6872

Goal

Users storing content in pulp_python should derive benefit from security scanning of Python packages that are out there.

Existing Tools

The idea is to integrate a tool not make a new one. Here are some options I've read about from this article.

Scanning Python Code Itself
Scanning Python Dependencies
  • safety <-- freemium model with limited updates when not paid for
Dominant language
Python
Stars
49
Forks
88
Avg merge
1d 10h
Merged PRs (30d)
31

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from pulp/pulp_python

All issues in pulp/pulp_python

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.