admin/aquasecurity-trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2026-02-07 17:23:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

Deployed 65d991cee to dev with MkDocs 1.3.0 and mike 1.1.2

Browse Source
This commit is contained in:
knqyf263
2024-08-08 06:22:02 +00:00
parent 40c3262620
commit 69dc885ec5
5 changed files with 171 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
dev/docs/coverage/language/python/index.html
View File

@@ -4352,7 +4352,7 @@ See <a href="../">here</a> for the detail.</p>
<p>Trivy parses your files generated by package managers in filesystem/repository scanning.</p>
<h3 id="pip">pip</h3>
<h4 id="dependency-detection">Dependency detection</h4>
<p>Trivy only parses <a href="https://packaging.python.org/en/latest/specifications/version-specifiers/#id4">version specifiers</a> with <code>==</code> comparison operator and without <code>.*</code>.
<p>Trivy only parses <a href="https://packaging.python.org/en/latest/specifications/version-specifiers/#id5">version specifiers</a> with <code>==</code> comparison operator and without <code>.*</code>.
To convert unsupported version specifiers - use the <code>pip freeze</code> command.</p>
<div class="highlight"><pre><span></span><code>$ cat requirements.txt
boto3~<span class="o">=</span><span class="m">1</span>.24.60
@@ -4414,7 +4414,7 @@ To build the correct dependency graph, <code>pyproject.toml</code> also needs to
<p>License detection is not supported for <code>Poetry</code>.</p>
<h2 id="packaging">Packaging</h2>
<p>Trivy parses the manifest files of installed packages in container image scanning and so on.
See <a href="https://packaging.python.org/en/latest/discussions/wheel-vs-egg/">here</a> for the detail.</p>
See <a href="https://packaging.python.org/en/latest/discussions/package-formats/">here</a> for the detail.</p>
<h3 id="egg">Egg</h3>
<p>Trivy looks for <code>*.egg-info</code>, <code>*.egg-info/PKG-INFO</code>, <code>*.egg</code> and <code>EGG-INFO/PKG-INFO</code> to identify Python packages.</p>
<h3 id="wheel">Wheel</h3>