Skip to content
This repository has been archived by the owner on Mar 24, 2024. It is now read-only.

Latest commit

 

History

History
12 lines (8 loc) · 712 Bytes

README.md

File metadata and controls

12 lines (8 loc) · 712 Bytes
Raw

pypi auto scanner

A github action that periodically fetches the latest pypi packages and scans them using a variety of methods:

  • Datadog's guarddog tool (which uses semgrep rules to run static analysis on source code)
  • custom yara rules
  • running file and detection binary executables
  • Sysdig+tcpdump dynamic analysis during install time

Note that the above techniques work well for NPM as well! A NPM equivalent of this repo will be available soon in the future.

Currently stores the JSON report in github action artifacts, *.txt files with a bunch of potentially malicious package names, and raises issues when suspicious packages are found.