GitHub now warns you about flaws affecting your Python code

Code repository will also offer admins fixes from the developer community

Python has joined Ruby and JavaScript on GitHub's list of coding languages it scans for security vulnerabilities.

Developers using Python can now get security alerts for any new bugs the code repository platform spots, as well as some recent vulnerabilities Python has had.

They will also find Python on their project dependency graph, which tracks all the projects, packages and applications a developer's code depends on without leaving their repository.

Advertisement - Article continues below

Security alerts will notify users of any known vulnerabilities affecting the code their repository relies on, and the dependency graph also lets users know if there's a known security fix from within the wider GitHub community.

GitHub, bought by Microsoft for $7.5 billion last month, tracked more than four million vulnerabilities in 500,000 Ruby and JavaScript code repositories after it shipped support for those languages last year.

Developers typically patched known vulnerabilities affecting their projects within seven days of detection, GitHub said, suggesting a similar approach for Python-based projects would be useful to users.

"We've chosen to launch the new platform offering with a few recent vulnerabilities," GitHub quality engineer Robert Schultheis said in a blog post.

"Over the coming weeks, we will be adding more historical Python vulnerabilities to our database. Going forward, we will continue to monitor the NVD feed and other sources, and will send alerts on any newly disclosed vulnerabilities in Python packages."

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

To enable Python security alerts, developers must first check in a requirements.txt file or Pipfile.lock file inside their public Python code repositories. Doing so will automatically enable the dependency graph and security alerts.

Private repositories require users to opt into security alerts via their settings, or by allowing access in the dependency graph section of the repository's 'Insights' tab.

Admins will then receive security alerts by default, and can add teams or individuals to the notifications via their settings page 'Alerts' tab.

Picture: Shutterstock

Featured Resources

Top 5 challenges of migrating applications to the cloud

Explore how VMware Cloud on AWS helps to address common cloud migration challenges

Download now

3 reasons why now is the time to rethink your network

Changing requirements call for new solutions

Download now

All-flash buyer’s guide

Tips for evaluating Solid-State Arrays

Download now

Enabling enterprise machine and deep learning with intelligent storage

The power of AI can only be realised through efficient and performant delivery of data

Download now
Advertisement

Recommended

Visit/security/cyber-security/355185/165-million-britons-experienced-a-cyber-crime-in-the-past-year
cyber security

Report: 16.5 million Britons fell victim to cyber crime in the past year

1 Apr 2020
Visit/cloud/amazon-web-services-aws/355183/aws-launches-amazon-detective
Amazon Web Services (AWS)

AWS launches Amazon Detective for investigating security incidents

1 Apr 2020
Visit/security/privacy/355182/government-to-launch-coronavirus-contact-tracking-app
privacy

UK government to launch coronavirus 'contact tracking' app

1 Apr 2020
Visit/software/video-conferencing/355180/zoom-does-not-use-end-to-end-encrypted
video conferencing

Zoom admits meetings don't use end-to-end encryption

1 Apr 2020

Most Popular

Visit/security/cyber-crime/355171/fbi-warns-of-zoom-bombing-hackers-amidst-coronavirus-usage-spike
cyber crime

FBI warns of ‘Zoom-bombing’ hackers amid coronavirus usage spike

31 Mar 2020
Visit/security/privacy/355155/zoom-kills-facebook-integration-after-data-transfer-backlash
privacy

Zoom kills Facebook integration after data transfer backlash

30 Mar 2020
Visit/security/data-breaches/355173/marriott-hit-by-data-breach-exposing-personal-data-of-52-million
data breaches

Marriott data breach exposes personal data of 5.2 million guests

31 Mar 2020
Visit/data-insights/data-management/355170/oracle-cloud-courses-are-free-during-coronavirus-lockdown
data management

Oracle cloud courses are free during coronavirus lockdown

31 Mar 2020