Skip to main content

Python PIP Safety

This producer component scans dependencies for Python projects. Read more about what it does on the Python PIP Safety page and GitHub repo.

How to use with Smithy​

Open-Source​

  1. Add the Helm package to the pipeline settings:
---
# file: ./my-pipeline/kustomization.yaml
components:
  - pkg:helm/smithy-security-oss-components/producer-python-pip-safety
  1. Configure the run parameters of the component in the pipeline run file. All parameters are optional:
# file: ./my-pipeline/pipelinerun.yaml
---
...
spec:
  ...
  params:
  - name: producer-python-pip-safety-input-dependency-file
    value: <Path to a requirements.txt>

SaaS​

  1. In the Smithy UI, open the page to create a new workflow.
  2. Find the PIP Safety in the Producers dropdown.

Options​

You can configure this component with the following options:

Option NameDescriptionDefaultType
producer-python-pip-safety-input-dependency-filePath to a requirements.txt. By default it will find the one in the root of your repo.""String