From 5e2b13afe3f78b410dab25342ca9d450b443176f Mon Sep 17 00:00:00 2001 From: Keith Smith Date: Fri, 26 Dec 2025 18:06:52 -0700 Subject: [PATCH] Add pip-audit for security vulnerability scanning MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Added pip-audit to scan Python dependencies for known CVEs and security vulnerabilities. This tool checks installed packages against vulnerability databases and reports any issues. Usage after deploying: docker exec keepitgoing-web pip-audit Recommended to run monthly or before major updates to identify packages that need security patches. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 --- requirements.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/requirements.txt b/requirements.txt index 6b17664..ab6cce6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -28,3 +28,6 @@ Pillow>=10.0.0 # Production gunicorn>=21.0.0 whitenoise>=6.6.0 + +# Security & Maintenance +pip-audit>=2.6.0 # Scan dependencies for known vulnerabilities