https://github.com/trustsource/ts-pip-plugin
Plugin to integrate TrustSource (code compliance) with your PIP Package Manager
https://github.com/trustsource/ts-pip-plugin
Last synced: 5 months ago
JSON representation
Plugin to integrate TrustSource (code compliance) with your PIP Package Manager
- Host: GitHub
- URL: https://github.com/trustsource/ts-pip-plugin
- Owner: TrustSource
- License: apache-2.0
- Archived: true
- Created: 2017-03-20T15:55:46.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2025-02-19T21:11:02.000Z (over 1 year ago)
- Last Synced: 2025-09-20T04:53:04.758Z (8 months ago)
- Language: Python
- Homepage: https://www.trustsource.io
- Size: 27.3 KB
- Stars: 1
- Watchers: 6
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# TrustSource PIP Plugin
The **ts-pip-plugin** scans a Python project for all installed pip modules. The plugin parses import statements of all project's source files and recursively extracts the complete module dependency tree.
The collected information is posted to the TrustSource service or will store it locally as JSON structure.
> [!WARNING]
> **PLEASE NOTE:**
> We merged our efforts to provide scanners for different languages into one scanner with the [ts-scan](https://github.com/trustsource/ts-scan) project. This project could still be used. But we will not continue to maintain this tool.
## Installation
#### Requirements
- **pip** - is often already contained in the Python distribution but in some cases, please, follow the pip's [installation instruction](https://pip.pypa.io/en/stable/installing/)
#### Installation from a local folder
```markdown
cd
pip install ./ --process-dependency-links
```
## Usage
```markdown
ts-pip-plugin
```
#### Requirements
- **ts-plugin.json** - settings file in the project's directory
## Project settings (ts-plugin.json)
- **project** : String - project name
- **credentials** : String [optional] - location of the file containing login information (userName and appKey) for the ECS service. Ignored: if a userName or appKey keys are present in the config file
- **userName** : String - TrustSource login name (optional)
- **appKey** : String - TrustSource key for apps
- **skipTransfer** : Bool - outputs the scan results into the stdout without submitting to the ECS service
## License
This software is licensed under the Apache Software License, version 2.0 ([Apache-2.0](https://github.com/trustsource/ts-pip-plugin/blob/master/LICENSE))