Comments (5)
christophetd
commented on August 25, 2024
1
Now published on PyPI: https://pypi.org/project/guarddog/
README updated as well!
from guarddog.
quantumpacket
commented on August 25, 2024
Another malicious package may get uploaded to PyPi that pretends to be this one
This!
from guarddog.
christophetd
commented on August 25, 2024
That's a good point. We'll be looking into it.
from guarddog.
christophetd
commented on August 25, 2024
While we get this sorted out I booked the package name with my personal account already. https://pypi.org/project/guarddog/
from guarddog.
christophetd
commented on August 25, 2024
WIP in #84
from guarddog.
Related Issues (20)
- GuardDog Only Scans "setup.py" For Code Execution
- GuardDog fails to detect code-exec rule with Fernet obj
- Reduce the sensitivity of "npm_metadata_mismatch" check HOT 1
- Create a Separate GuardDog Signal for Admin Account with a Domain that can be Hijacked
- shady-links false positive on concatenation
- publish image to dockerhub HOT 2
- Wrong information showing on terminal HOT 3
- shady-links comment false positive HOT 1
- Guarddog is scanning all dependency versions HOT 1
- Please add support for extra index urls HOT 1
- Typo in GUARDDOG_PARALLELISIM environment variable name HOT 1
- "failed to run rule potentially_compromised_email_domain: can't compare offset-naive and offset-aware datetimes"
- "failed to run rule repository_integrity_mismatch: Error while cloning repository authentication required but no callback set with github url https://github.com/grpc/grpc"
- "failed to run rule potentially_compromised_email_domain: Invalid version [...]" when using Recent "packaging" Package
- Received unsupported operand type(s) for &: 'set' and 'tuple'% HOT 4
- Unused callback function argument in PackageScanner
- Null result messages are dropped by metadata analysis HOT 2
- Unexpected behavior for local directory scan
- Overly restrictive tarball file extension checking
- Missing NPM heuristic: download-executable
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from guarddog.