package opam-audit

  1. Overview
  2. Docs
Audit your opam switch for known security issues

Install 

dune-project
 Dependency

github.com Readme Changelog AGPL-3.0-or-later License Edit opam file Versions (1)

Authors

  1. H
    Hannes Mehnert <hannes@mehnert.org>

Maintainers

  1. H
    Hannes Mehnert <hannes@mehnert.org>

Sources

opam-audit-0.0.1.tbz
sha256=c0c7d3c892043aeadb22595d8f9bc51ea4c03eada6f291f16631bfc6035931d4
sha512=3a87905eaafd68a1e888246b0bf9e16567dd82d9ff96447a6513503608d28c833533504d5bc0e2f7bb7ef061bf55a33d5a703ee726c0cacf893d9e25fc0424bc

Description

Opam audit downloads the OCaml security advisory database from https://github.com/ocaml/security-advisories and investigates whether the active opam switch has any vulnerable opam packages installed.

Added to opam-repository:

README

opam audit

The opam-audit command line utility keeps a local copy of the OCaml security advisory database and checks whether any package in the active opam switch has a known security advisory.

When a vulnerable package is found, opam-audit reports the affected package together with the corresponding security advisory. It exits with an error (exit code = 124) if any vulnerability is detected, making it suitable for use in CI.

Dependencies (10)

  1. opam-state >= "2.5.2"
  2. bytesrw >= "0.2.0"
  3. jsont >= "0.2.0"
  4. opam-format >= "2.5.0"
  5. cmdliner >= "2.1.0"
  6. fmt >= "0.11.0"
  7. bos >= "0.2.1"
  8. logs >= "0.10.0"
  9. dune >= "1.0"
  10. ocaml >= "4.11.0"

Dev Dependencies

None

Used by

None

Conflicts

None