shenxianpeng/pipguard
Scan Python packages for supply chain attacks before installing them.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| requirements | Path to a requirements file to scan and install (e.g. requirements.txt). | no | "" |
| packages | Space-separated package specifiers to scan and install (e.g. "requests numpy==1.26.3"). | no | "" |
| check-vulns | Also query OSV.dev for known vulnerabilities (adds --check-vulns). | no | false |
| fail-on-vuln | Fail the job if any package has a known OSV vulnerability (adds --fail-on-vuln). | no | false |
| args | Additional arguments passed through to `pipguard install`. | no | "" |
| version | pipguard version to install (e.g. 0.2.0). Default: latest release from PyPI. | no | "" |
| python-version | Python version used to run pipguard. | no | 3.12 |
Outputs
no outputs