safety

import subprocess import os # Create a dummy requirements.txt for demonstration with open('requirements.txt', 'w') as f: f.write('requests==2.25.1 # known vulnerable version for demo (CVE-2023-32681, fixed in 2.31.0) ') f.write('Flask==2.3.2 # non-vulnerable example ') print('Scanning requirements.txt for vulnerabilities...') # Run safety scan command. Note: For full, commercial vulnerability database access, # an API key might be required. Basic scanning may work without explicit auth or prompt for it. # Use os.environ.get('SAFETY_API_KEY', '') if using a commercial key programmatically. try: # Using check=False to capture output even if safety exits with a non-zero code (vulnerabilities found) result = subprocess.run( ['safety', 'scan', '-r', 'requirements.txt', '--full-report'], capture_output=True, text=True, check=False ) print('--- Safety Scan Output ---') print(result.stdout) if result.stderr: print('--- Safety Scan Errors ---') print(result.stderr) print(f'Safety exited with code: {result.returncode}') except FileNotFoundError: print("Error: 'safety' command not found. Ensure Safety CLI is installed and in your PATH.") except Exception as e: print(f"An unexpected error occurred: {e}") finally: # Clean up the dummy file if os.path.exists('requirements.txt'): os.remove('requirements.txt')