PyRaider
Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database. Documentation
Usage
Table of Contents
- Installation
- Usage
- Scan Dependencies
- Scan Dependencies by Severity
- Report
- Outdated package check
- CI/CD
- Fix
- Autofix
- Release Note
- Help
Install pyraider using pip or pyenv
pip install pyraider
pyenv install pyraider
To check the list of options available.
pyraider -h
Scan Vulnerabilities against the dependencies
Using PyRaider you can scan the vulnerable packages.
To run basic scan you can use pyraider go command.
It will automatically detects the installed packages and scans against it and shows the report.
pyraider go
If you want to scan you packages against requirements.txt or Pipfile.lock file.
pyraider check -f /Users/raider/project/requirements.txt
pyraider check -f /Users/raider/project/Pipfile.lock
Reports
PyRaider currently supports
JSON,HTMLandCSVformats.
To Export as a JSON file.
pyraider go -e json result.json
pyraider check -f /Users/raider/project/requirements.txt -e json result.json
To Export as a CSV file.
pyraider go -e csv result.csv
pyraider check -f /Users/raider/project/requirements.txt -e csv result.csv
To Export as a HTML file.
pyraider check -f go -e html result.html
pyraider check -f /Users/raider/project/requirements.txt -e html result.html
Out of Date Pacakges
Using PyRaider you can check the latest packages. Against installed packages.
pyraider validate -p django==1.11.13
pyraider validate -f /Users/raider/project/requirements.txt
pyraider validate -f /Users/raider/project/Pipfile.lock
Auto Fix
PyRaider also supports
fixfeature. Using this you can fix the vulnerable packages.
Note: To updating the packages might affect your application.
Fix
You can fix vulnerable package.
pyraider fix
Fix by Severity
pyraider fix -s high
Autofix
You can also autofix vulnerable packages.
pyraider autofix
Autofix by severity
pyraider autofix -s high
Update latest database
Now you can update the resource database with latest updated vulnerabilities
pyraider updatedb
Docker container
You can also run
pyraiderhas a docker container.
Build docker container image
docker build -t pyraider .
Contact us:
- Discord : Click here to join Discord, to be a part of PyRaider family.
- Follow us on Twitter : https://twitter.com/tilakthimmappa
- Email : tilakthimmappa@gmail.com
Contribute
- We welcome contributions to this project in the form of:
- Feature Requests, Suggestions
- Bugs
- Help with writing tests
- Add-on features, plugins, etc
- Documentation
Author
1 maintainer
Metadata
1 maintainer
Release files for pyraider 1.0.20
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| pyraider-1.0.20.tar.gz | 12.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| pyraider-1.0.20-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 24.2 kB
Release files / pyraider-1.0.20.tar.gz
| Download URL | pyraider-1.0.20.tar.gz |
|---|---|
| Size | 12.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
6132b98dd0fbbfade3deec8eb70e992cf3b84628d577375f94a56c119d753005
|
|
BLAKE2b-256 checksum How to use checksums |
20d8418a16105421524b6f9820355df01bd8829d989ffc87878ebfb8cb0dc775
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.6.1 requests/2.25.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.54.0 CPython/3.8.5
|
Release files / pyraider-1.0.20-py3-none-any.whl
| Download URL | pyraider-1.0.20-py3-none-any.whl |
|---|---|
| Size | 12.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3e7b6f988554256dc4854a7a74eb79120671b5738e480458ff827f0e52d24f99
|
|
BLAKE2b-256 checksum How to use checksums |
ae93428cd83c2f0e56195c1ef08c08b9ef66a9d76caecb4ff8a5df44a75c6d48
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/3.2.0 pkginfo/1.6.1 requests/2.25.0 setuptools/50.3.2 requests-toolbelt/0.9.1 tqdm/4.54.0 CPython/3.8.5
|
