pyraider 0.4.2

A small example package for pythonsca

PyRaider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

Usage

Documentation

Install pyraider using pip

pip install pyraider

Once a pyraider you can run help command. It will show you the list commands and examples.

pyraider -h

You can use pyraider -v to check the version.

pyraider -v

Scan Vulnerabilities against the dependencies

Using PyRaider you can scan the vulnerable packages.

To run basic scan you can use pyraider go command. It will automatically detects the installed packages and scans against it and shows the report.

pyraider go

If you want to scan you packages against requirements.txt or Pipfile.lock file.

pyraider check -f /Users/raider/project/requirements.txt

pyraider check -f /Users/raider/project/Pipfile.lock

If you want to scan the packages in the same directory.

pyraider check -f .

Reports

PyRaider currently supports JSON and CSV formats.

To Export as a JSON file.

pyraider check -f /Users/raider/project/requirments.txt -e json result.json

pyraider check -f /Users/raider/project/Pipfile.lock -e json result.json

To Export as a CSV file.

pyraider check -f /Users/raider/project/requirments.txt -e csv result.csv

pyraider check -f /Users/raider/project/Pipfile.lock -e csv result.csv

Out of Date Pacakges

Using PyRaider you can check the latest packages. Aginst installed packages.

pyraider validate -f /Users/raider/project/requirments.txt

pyraider validate -f /Users/raider/project/Pipfile.lock

• It will check out of dated packages on the actiavted virtual environment.

pyraider validate 

Auto Fix

PyRaider also supports auto fix feature. Using this you can fix the vulnerable packages.

Note: To updating the packages might affect your application.

Fix

You can fix packages vulnerabilities individually. Once it is installed it will automatically update the requirments.txt or Pipfile.lock file.

pyraider fix

Autofix

You can also fix packages vulnerabilities at one shot. Once it is installed it will automatically update the requirments.txt or Pipfile.lock file.

pyraider autofix

Docker container

You can also run pyraider has a docker container.

Build docker container image

docker build -t pyraider .

Contribute

• We welcome contributions to this project in the form of:
  • Feature Requests, Suggestions
  • Bugs
  • Help with writing tests
  • Add-on features, plugins, etc
  • Documentation

Contact us:

• Email : [e-mail]
• Twitter : https://twitter.com/raidersrc