topic Python requirements.txt in Prisma Cloud Discussions

Python requirements.txt

cschelin — Mon, 08 Nov 2021 18:59:35 GMT

For Python, Prisma Cloud picks up vulnerabilities found in packages defined in the requirements.txt file in codebases. However, I could easily set up a Docker image to run `pip install dangerous-package==1.1.2`, and that would run long before any codebase enters the picture.

Does Prisma Cloud also check packages pre-installed on Docker images?

Re: Python requirements.txt

AKing9 — Thu, 11 Aug 2022 17:45:05 GMT

Greetings Cschelin,

I hope that this note finds you well! I know that it has been a while since you had posted this question but I wanted to see if you still potentially needed any help. Thank you for your time and I hope that you have a good remainder of your day.

Kind Regards,

J. Avery King