pysentry-rs 0.4.5

Security vulnerability auditing tool for Python packages

PySentry

Help to test and improve · Participate in pysentry usage survey

Please, send feedback to [e-mail]

A fast, reliable security vulnerability scanner for Python projects, written in Rust.

PySentry audits Python projects for known security vulnerabilities by analyzing dependency files and cross-referencing them against multiple vulnerability databases.

Documentation · Benchmarks · Buy Me a Coffee

Features

• Multiple formats — uv.lock, poetry.lock, Pipfile.lock, pylock.toml, pyproject.toml, Pipfile, requirements.txt
• Multiple sources — PyPA Advisory Database, PyPI JSON API, OSV.dev (all enabled by default)
• PEP 792 support — Detects archived, deprecated, and quarantined packages
• Flexible output — Human-readable, JSON, SARIF, Markdown
• Fast — Written in Rust with async processing and caching

Installation

# Using uvx (recommended)
uvx pysentry-rs /path/to/project

# Using pip
pip install pysentry-rs

# Using cargo
cargo install pysentry

# Pre-built binaries available at GitHub Releases

See Installation Guide for all options.

Quick Start

Note: Examples use pysentry-rs. If you installed via cargo install pysentry or a binary release, replace it with pysentry throughout.

# Scan current directory
pysentry-rs

# Scan specific project
pysentry-rs /path/to/project

# Filter by severity
pysentry-rs --severity high

# Output to JSON
pysentry-rs --format json --output report.json

# Fail on critical vulnerabilities only
pysentry-rs --fail-on critical

# Block quarantined packages (malware protection)
pysentry-rs --forbid-quarantined

See Quickstart Guide for more examples.

Pre-commit

repos:
  - repo: https://github.com/pysentry/pysentry-pre-commit
    rev: v0.4.5
    hooks:
      - id: pysentry
        # Use compact mode for minimal pre-commit output
        # args: ['--compact']

Configuration

PySentry supports TOML configuration via .pysentry.toml or pyproject.toml:

# .pysentry.toml
version = 1

[defaults]
severity = "medium"
fail_on = "high"

[sources]
enabled = ["pypa", "osv"]

[ignore]
ids = ["CVE-2023-12345"]

See Configuration Guide for all options.

Documentation

Full documentation is available at docs.pysentry.com:

• Installation
• Quickstart
• CLI Options
• Configuration Files
• Environment Variables
• Troubleshooting

Requirements

• For requirements.txt scanning: Install uv (recommended) or pip-tools for dependency resolution
• Python: 3.9–3.14 (for pip/uvx installation)
• Rust: 1.79+ (for cargo installation or building from source)

Acknowledgments

• Inspired by pip-audit and uv #9189
• Vulnerability data from PyPA, PyPI, and OSV.dev