TrustSource PIP Plugin

The ts-pip-plugin scans a Python project for all installed pip modules. The plugin parses import statements of all project's source files and recursively extracts the complete module dependency tree. The collected information is posted to the TrustSource service or will store it locally as JSON structure.

Warning

PLEASE NOTE: We merged our efforts to provide scanners for different languages into one scanner with the ts-scan project. This project could still be used. But we will not continue to maintain this tool.

Installation

Requirements

• pip - is often already contained in the Python distribution but in some cases, please, follow the pip's installation instruction

Installation from a local folder

cd <path to the ts-pip-plugin>
pip install ./ --process-dependency-links

Usage

ts-pip-plugin <path to the project directory>

Requirements

• ts-plugin.json - settings file in the project's directory

Project settings (ts-plugin.json)

• project : String - project name
• credentials : String [optional] - location of the file containing login information (userName and appKey) for the ECS service. Ignored: if a userName or appKey keys are present in the config file
• userName : String - TrustSource login name (optional)
• appKey : String - TrustSource key for apps
• skipTransfer : Bool - outputs the scan results into the stdout without submitting to the ECS service

License

This software is licensed under the Apache Software License, version 2.0 (Apache-2.0)