Skip to content

Conversation

righettod
Copy link
Contributor

Purpose of pull request

Hi,

This PR propose to add the following pip related files:

  • Pipfile
  • Pipfile.lock

Such files can be present, by mistake, after the deployment of a python-based web app and, then, can provides information about:

  • External modules used and then potential vulnerable ones.
  • Exposure to dependency confusion attacks in case of internal modules used.

Source

Additional context

None.

@righettod
Copy link
Contributor Author

🤔Error on line 4748 is not related to my update of the file:

image

@ItsIgnacioPortal
Copy link
Collaborator

Great stuff as always @righettod 👍

@ItsIgnacioPortal ItsIgnacioPortal merged commit 114329b into danielmiessler:master Mar 21, 2025
1 check failed
@righettod righettod deleted the pipfile_add branch March 24, 2025 05:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants