Add pip-audit for security vulnerability scanning

Added pip-audit to scan Python dependencies for known CVEs and
security vulnerabilities. This tool checks installed packages
against vulnerability databases and reports any issues.

Usage after deploying:
  docker exec keepitgoing-web pip-audit

Recommended to run monthly or before major updates to identify
packages that need security patches.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
Keith Smith
2025-12-26 18:06:52 -07:00
co-authored by Claude Sonnet 4.5
parent ec09baf9a5
commit 5e2b13afe3
+3
View File
@@ -28,3 +28,6 @@ Pillow>=10.0.0
# Production # Production
gunicorn>=21.0.0 gunicorn>=21.0.0
whitenoise>=6.6.0 whitenoise>=6.6.0
# Security & Maintenance
pip-audit>=2.6.0 # Scan dependencies for known vulnerabilities