Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the Safety scanner from the pre-commit hooks and GitHub action #15

Merged
merged 1 commit into from
Nov 29, 2021

Conversation

pronovic
Copy link
Owner

Since February, I have been using the Safety scanner as part of my pre-commit hooks and GitHub actions, to identify vulnerabilities in Python dependencies. Even though Safety is distributed under the liberal MIT license, and the PyPI package page documents that Safety can be used in this manner, the PyUp organization behind Safety now claims that this usage is not allowed. Despite my repeated attempts to clarify what I was doing wrong, PyUp's representative never offered any specifics. I don't think Safety adds enough value to pursue this further, so I'm just removing all usage of Safety. I'll rely on Dependabot instead. For more details, see the bizarre email conversation with PyUp that I have captured in the apologies repository.

@pronovic pronovic merged commit 6a0672b into master Nov 29, 2021
@pronovic pronovic deleted the ken/remove-safety branch November 29, 2021 03:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant