3

Python's pip dependency manager is supported by a number of vulnerability scanners (e.g., Snyk, Gitlab's gemnasium, PyUp), but I have not found such a service for scanning dependencies defined in Conda's environment.yml.

Is there a service out there which supports Conda? Can I somehow massage an existing service into scanning these deps?

Conda: https://conda.io/docs/

Anaconda: https://anaconda.org/

Improve this question
2
  • there is a scanner of a particular environment : github.com/ContinuumIO/anaconda-cve . It doesn't seem very fancy or even maintained, but perhaps it will get you on the right path?
    – Bruce Becker
    Commented Nov 7, 2018 at 15:07
  • Thank you for posting a question. Could you modify the question so that it contains the attempts you have done in order to solve the issue?
    – 030
    Commented Dec 23, 2019 at 10:34

0

Reset to default

Browse other questions tagged or ask your own question.