Skip to content

Test Dep Confusion and Typosquatting #76

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
confusedcrib wants to merge 1 commit into
base: main
Choose a base branch
from

update reqs

7834198
Select commit
Loading
Failed to load commit list.
Open

Test Dep Confusion and Typosquatting #76

update reqs
7834198
Select commit
Loading
Failed to load commit list.
DryRunSecurity / Sensitive Files Analyzer succeeded Jan 30, 2025 in 1s

DryRun Security

Details

Sensitive Files Analyzer Findings: 1 detected

⚠️ Potential Sensitive File insecure-app/requirements.txt (click for details)
Type Potential Sensitive File
Description It is typical for Django applications to utilize requirements.txt files to manage
their dependencies. A change in this file may indicate an addition of a
library/dependency which could introduce additional risk to the application
either through vulnerable code, expansion of the application's attack surface
via additional routes, or malicious code.
Filename insecure-app/requirements.txt
CodeLink

insecure-kubernetes-deployments/insecure-app/requirements.txt

Lines 1 to 4 in 7834198

requests == 2.19.1
#cryptography==3.3.2
flask==3.0.2
cryptograpy==3.3.2
View more details on DryRunSecurity