code.pip-auditpip-audit (Python vulnerabilities)
Audits exactly pinned Python requirements (requirements*.txt, poetry.lock, Pipfile.lock) with pip-audit. Pins are rewritten into a temporary name==version file and audited with --no-deps --disable-pip, so nothing is resolved, downloaded or installed and no build script runs. Files that are not fully pinned are skipped.
- Engine
- Wrapped scanner
- Wraps
pip-audit- Targets
- Codebase
- Areas
- Supply chain, Security
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.pip-auditWraps pip-audit. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.