Body: <p>Python's <code>pip</code> dependency manager is supported by a number of vulnerability scanners (e.g., Snyk, Gitlab's gemnasium, PyUp), but I have not found such a service for scanning dependencies defined in Conda's <code>environment.yml</code>.</p>
  
  <p>Is there a service out there which supports Conda? Can I somehow massage an existing service into scanning these deps?</p>
  
  <hr>
  
  <p>Conda: <a href="https://conda.io/docs/" rel="nofollow noreferrer">https://conda.io/docs/</a></p>
  
  <p>Anaconda: <a href="https://anaconda.org/" rel="nofollow noreferrer">https://anaconda.org/</a></p>
  
Comments: CC BY-SA 4.0
Comments: 2018-11-07T15:07:27.560Z
Comments: there is a scanner of a particular _environment_  : https://github.com/ContinuumIO/anaconda-cve . It doesn't seem very fancy or even maintained, but perhaps it will get you on the right path?
Comments: Bruce Becker
Comments: CC BY-SA 4.0
Comments: 2019-12-23T10:34:03.163Z
Comments: Thank you for posting a question. Could you modify the question so that it contains the attempts you have done in order to solve the issue?
Comments: 030
Tags: <python>
Title: Dependency vulnerability scanner for Conda?
UserDisplayName: JosephSlote
ThreadText: # Dependency vulnerability scanner for Conda?
  
  (Asked by: username_0 on 2018-05-23)
  
  Python's `pip` dependency manager is supported by a number of vulnerability scanners (e.g., Snyk, Gitlab's gemnasium, PyUp), but I have not found such a service for scanning dependencies defined in Conda's `environment.yml`.
  
  Is there a service out there which supports Conda? Can I somehow massage an existing service into scanning these deps?
  
  ---
  
  Conda: <https://conda.io/docs/>
  
  Anaconda: <https://anaconda.org/>
  
  **Tags:** python
  
  > **Comments:**
  > **username_1**: there is a scanner of a particular _environment_  : https://github.com/ContinuumIO/anaconda-cve . It doesn't seem very fancy or even maintained, but perhaps it will get you on the right path?  
  > **username_2**: Thank you for posting a question. Could you modify the question so that it contains the attempts you have done in order to solve the issue?  
  
  ---
  
  ## 0 answers
  
  