safety - Safety checks Python dependencies for known securi

项目说明

![safety]()

![Downloads]()
!CI Status
!License
!PyPI
!Python
!Co

> [!NOTE]
> Come and join us at SafetyCLI. We are hiring for roles.

Table of Contents

Table of Contents

Introduction

Key Features

Getting Started

- GitHub Action
- Command Line Interface
- 1. Installation
- 2. Log In or Register
- 3. Running Your First Scan
- Basic Commands

Ser Agreement (SLA)

Detailed Documentation

License

Supported Python

Resources

Introduction

Safety CLI is a Python dependency scanner designed to enhance software supply chain security by detecting packages with known and malicious packages in local de en, CI/CD, and production systems.
Safety CLI can be deployed in minutes and provides clear, actionable recommendations for remediation of detected .

Le the industry's most comprehensi of and malicious packages, Safety CLI Scanner allows teams to detect at every stage of the software de lifecycle.

Key Features

, comprehensi security scanning for Python packages.

Le Safety DB, the most comprehensi data a for Python.

Clear output with detailed recommendations for remediation.

Automatically updates requirements files to secure of dependencies where a, guided by your project's policy settings.

Scanning of indi requirements files and project directories or system-wide scans on de machines, CI/CD pipelines, and Production systems to detect or malicious dependencies.

JSON, SBOM, HTML and text output.

Easy integration with CI/CD pipelines, including GitHub Actions.

Enterprise Ready: Safety CLI can be deployed to large teams with complex project setups with ease, on-premise or as a SaaS product.

Getting Started

GitHub Action

Test Safety CLI in CI/CD using our GitHub Action.

Full documentation on the GitHub Action is a on our Documentation Hub.

Command Line Interface

1. Installation

Install Safety on your de machine.

Run pip install safety.

2. Log In or Register

Run your first scan using safety scan.

If not authenticated, Safety will prompt for account creation or login.

Use safety auth to check authentication status.

3. Running Your First Scan

Na to a project directory and run safety scan.

Safety will perform a scan and present results in the Terminal.

Basic Commands

safety --help: Access help and display all a commands.

safety auth: Start authentication flow or display status.

safety scan: Perform a scan in the current directory.

safety system-scan: Disco assets on your de machine — AI assistants (e.g. Claude Code, Claude Desktop), dependencies, runtimes, en, and de tools. A as part of the Safety commercial product — see

safety scan --apply-fixes: Update dependencies.

Ser Agreement (SLA)

We are committed to maintaining a high level of responsi and transparency in managing issues reported in our codebases. This SLA outlines our policies and procedures for handling issues to ensure timely resolutions and effecti with our community.

Read our full SLA

Detailed Documentation

Full documentation is a at

Included in the documentation are the following key topics:

Safety CLI 3

Introduction to Safety CLI 3

Quick Start Guide

Installation and Authentication

Scanning for and Malicious Packages

Scan Results

A Commands and Inputs

Scanning in CI/CD

License Scanning

Exit Codes

Remediation

Applying Fixes

Integration

Securing Git Repositories

GitHub

GitHub Actions

GitLab

Git Post-Commit Hooks

BitBucket

Pipenv

Docker Containers

Administration

Policy Management

Output

Output Options and Recommendations

JSON Output

SBOM Output

HTML Output

Miscellaneous

Release Notes

Breaking Changes in Safety 3

Safety 2.x Documentation

Support

System status is a at

Further support is a by emailing .

License

Safety is released under the MIT License.

Upon creating an account, a 7-day free trial of our Team plan is offered to new users, after which they will be downgraded to our Free plan. This plan is limited to a single user and is not recommended for commercial purposes.

Our paid plans for commercial use begin at just $25 per seat per month and allow scans to be performed using our full database, complete with 3x more tracked and malicious packages than our free plan and other pro. To learn more about our Team and Enterprise plans, please visit or email .

Supported Python

Safety CLI 3 supports Python >=3.9. Further details on supported , as well as options to run Safety CLI on <3.9 using a Docker image are a in our Documentation Hub.

We maintain a policy of supporting all maintained and secure of Python, plus one minor below the oldest maintained and secure . Details on Python that meet these criteria can be found here:

Resources

Safety Cybersecurity website

Safety Login Page

Documentation

Careers/Hiring

Security Research and Blog

GitHub Action

Support

Status Page

项目信息

开发语言：Python

Star 数：1998

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。