How to integrate TrustSource with Python

The plugin for Python is provided as pip-plugin. It scans a Python project for all installed pip modules. The plugin parses import statements of all project's source files and recursively extracts the complete module dependency tree. The collected information is posted to the TrustSource service.

Installation

Requirements

• pip - is often already contained in the Python distribution but in some cases, please, follow the pip's installation instruction

Installation from a local folder

cd <path to the TrustSource pip-plugin>
pip install ./

Usage

ecs-pip-plugin <path to the project directory>

Requirements

• ecs-plugin.json - settings file in the project's directory

Project settings (ecs-plugin.json)

• project : String - project name
• credentials : String [optional] - location of the file containing login information (userName and appKey) for the TrustSource service. Ignored: if a userName or appKey keys are present in the config file
• userName : String - TrustSource login name
• appKey : String - TrustSource key for apps
• skipTransfer : Bool - outputs the scan results into the stdout without submitting to the TrustSource service