github-starred/awesome-python
2
0
Fork 0
mirror of https://github.com/vinta/awesome-python.git synced 2026-11-08 02:15:12 -06:00
Code Issues 461 Packages Projects Releases Wiki Activity

feat: add betterleaks to Supply Chain Security > Secret Scanning

Browse Source 
Leaked secrets are a supply chain risk that dependency audits don't cover, so Supply Chain Security splits into Dependency Audits and Secret Scanning.

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Vinta Chen
2026-10-16 17:26:54 +08:00
co-authored by Claude
parent cf2667a145
commit 3322bb3ce7
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+6 -3
View File
@@ -1163,10 +1163,13 @@ _Frameworks and tools for penetration testing._
### Supply Chain Security
_Tools for auditing dependencies against known vulnerabilities._
_Tools for auditing dependencies against known vulnerabilities and scanning for leaked secrets._
- [pip-audit](https://github.com/pypa/pip-audit) - Audits Python environments and dependency trees for known vulnerabilities, using the Python Packaging Advisory Database or OSV.
- [uv-audit](https://github.com/astral-sh/uv) - (part of uv) uv's [dependency vulnerability scanning](https://docs.astral.sh/uv/reference/cli/#uv-audit) backed by OSV.
- Dependency Audits
- [pip-audit](https://github.com/pypa/pip-audit) - Audits Python environments and dependency trees for known vulnerabilities, using the Python Packaging Advisory Database or OSV.
- [uv-audit](https://github.com/astral-sh/uv) - (part of uv) uv's [dependency vulnerability scanning](https://docs.astral.sh/uv/reference/cli/#uv-audit) backed by OSV.
- Secret Scanning
- [betterleaks](https://github.com/betterleaks/betterleaks) - Finds leaked secrets in git history, directories, and files, from the original author of gitleaks.
### Web Security
website/data/pypi_name_overrides.json
+1
View File
@@ -1,6 +1,7 @@
{
"autobahn-python": { "package": "autobahn", "reason": null },
"azure-sdk-for-python": { "package": null, "reason": "monorepo umbrella; ships as many azure-* packages, no single package represents it", "badge": "Multiple on PyPI" },
"betterleaks": { "package": null, "reason": "not published on PyPI" },
"cloud-init": { "package": null, "reason": "installed via distro images, not pip" },
"concurrent-futures": { "package": null, "reason": "stdlib module" },
"conda": { "package": null, "reason": "installed via Miniforge or Anaconda installers; PyPI conda is a stale 2017 upload" },