Internal
Public Access
Add pip-audit for security vulnerability scanning
Added pip-audit to scan Python dependencies for known CVEs and security vulnerabilities. This tool checks installed packages against vulnerability databases and reports any issues. Usage after deploying: docker exec keepitgoing-web pip-audit Recommended to run monthly or before major updates to identify packages that need security patches. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Sonnet 4.5
parent
ec09baf9a5
commit
5e2b13afe3
@@ -28,3 +28,6 @@ Pillow>=10.0.0
|
||||
# Production
|
||||
gunicorn>=21.0.0
|
||||
whitenoise>=6.6.0
|
||||
|
||||
# Security & Maintenance
|
||||
pip-audit>=2.6.0 # Scan dependencies for known vulnerabilities
|
||||
|
||||
Reference in New Issue
Block a user