<p>Python's <code>pip</code> dependency manager is supported by a number of vulnerability scanners (e.g., Snyk, Gitlab's gemnasium, PyUp), but I have not found such a service for scanning dependencies defined in Conda's <code>environment.yml</code>.</p>

<p>Is there a service out there which supports Conda? Can I somehow massage an existing service into scanning these deps?</p>

<hr>

<p>Conda: <a href="https://conda.io/docs/" rel="nofollow noreferrer">https://conda.io/docs/</a></p>

<p>Anaconda: <a href="https://anaconda.org/" rel="nofollow noreferrer">https://anaconda.org/</a></p>

CC BY-SA 4.0
2018-11-07T15:07:27.560Z
there is a scanner of a particular _environment_  : https://github.com/ContinuumIO/anaconda-cve . It doesn't seem very fancy or even maintained, but perhaps it will get you on the right path?
Bruce Becker
CC BY-SA 4.0
2019-12-23T10:34:03.163Z
Thank you for posting a question. Could you modify the question so that it contains the attempts you have done in order to solve the issue?
030
<python>
Dependency vulnerability scanner for Conda?
JosephSlote
# Dependency vulnerability scanner for Conda?

(Asked by: username_0 on 2018-05-23)

Python's `pip` dependency manager is supported by a number of vulnerability scanners (e.g., Snyk, Gitlab's gemnasium, PyUp), but I have not found such a service for scanning dependencies defined in Conda's `environment.yml`.

Is there a service out there which supports Conda? Can I somehow massage an existing service into scanning these deps?

---

Conda: <https://conda.io/docs/>

Anaconda: <https://anaconda.org/>

**Tags:** python

> **Comments:**
> **username_1**: there is a scanner of a particular _environment_  : https://github.com/ContinuumIO/anaconda-cve . It doesn't seem very fancy or even maintained, but perhaps it will get you on the right path?  
> **username_2**: Thank you for posting a question. Could you modify the question so that it contains the attempts you have done in order to solve the issue?  

---

## 0 answers

