google / google/osv-scanner

Support pyproject.toml files

Open
#1,244 3 comments 1 reaction 0 assignees View on GitHub
backlog enhancement
Dominant language
Go
Stars
11k
Forks
792
Avg merge
2d 1h
Merged PRs (30d)
48

Description

Currently OSV-Scanner does not support `pyproject.toml` files.

Example: https://github.com/huggingface/datatrove/blob/main/pyproject.toml

I am not familiar with how many projects use a `pyproject.toml` file for dependencies management so I can't speak to the impact of this enhancement. At the same time, it seems like an easy file to extract the dependencies from.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.