dependency-check / dependency-check/DependencyCheck

Support .pyz and .pyzw "Python ZIP Application" files

Open
#307 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

[PEP 0441](https://www.python.org/dev/peps/pep-0441/) describes ZIP application files. For the easy case, of .pyz and .pyzw archives that contain source code (.py files), this should be as simple as adding the two extensions to `ZIPPABLES` in [ArchiveAnalyzer](https://github.com/jeremylong/DependencyCheck/blob/master/dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/ArchiveAnalyzer.java).

For the more difficult case where .pyc and .pyo files are in the archive, it will be necessary to invoke a Python decompiler.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.