populationgenomics/Python Package Scanner
Scan Python dependencies for vulnerabilities with dependency chain tracing
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | Detection mode: auto, uv, or pip | no | auto |
| path | Path to directory containing uv.lock or requirements.txt | no | . |
| fail-on-vulns | Exit with failure if vulnerabilities found | no | true |
| comment-on-pr | Post/update PR comment with report | no | true |
| ignore-ids | Comma-separated vulnerability IDs to ignore | no | "" |
| ignore-packages | Comma-separated package names to skip | no | "" |
| exclude-dev | Exclude dev dependencies from the scan | no | false |
Outputs
| name | description |
|---|---|
| vuln-count | Number of vulnerabilities found |
| report | Markdown report content |