Skip to content
Use this GitHub Action with your project

Add this Action to an existing workflow or create a new one.

View on Marketplace
master
Switch branches/tags
Go to file
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
doc
 
 
src
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

README.md

PyCharm Python Security plugin

GitHub Actions Downloads Version codecov Documentation Status Docker Cloud Build Status

A plugin to run security checks for common flaws in Python code and suggest quick fixes.

Demo

Check out the webinar for a full demo of the functionality in this plugin:

IMAGE ALT TEXT HERE

Documentation

Documentation is available on pycharm-security.readthedocs.io, including examples and explanations for all the checks.

GitHub Action Documentation

Documentation for the GitHub action is on the documentation site.

Snyk Support

Plugin has support for snyk.io as the vulnerability database. Snyk offers an up to date and in-depth database of Python package issues. Your installed packages will be checked against a live database of PyPi issues (subscription required.)

Bundled SafetyDB

This plugin will check the installed packages in your Python projects against the SafetyDB and raise a warning for any vulnerabilities.

Current checks

See Supported Checks for a current list.

Current quick fixes

See Fixes for a current list.

Release History

See Release History for the release history.

Contributing

If you would like to alter or add new checks and fixes, see the Development page.

License

This project is MIT Licensed.

Credits

Credit to the PyUp.io team for the SafetyDB. This project uses SafetyDB to scan packages, SafetyDB is licensed under "Attribution-NonCommercial 4.0 International" license.