Merge pull request #179 from cisagov/improvement/add_pip-audit_pre-co…

…mmit_hook Add a pre-commit hook to run `pip-audit`
cisagov · Sep 25, 2024 · 5801cec · 5801cec
2 parents 28dc4ce + 045a998
commit 5801cec
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -149,6 +149,18 @@ repos:
     rev: v1.10.0
     hooks:
       - id: mypy
+  - repo: https://github.com/pypa/pip-audit
+    rev: v2.7.3
+    hooks:
+      - id: pip-audit
+        args:
+          # Add any pip requirements files to scan
+          - --requirement
+          - requirements-dev.txt
+          - --requirement
+          - requirements-test.txt
+          - --requirement
+          - requirements.txt
   - repo: https://github.com/asottile/pyupgrade
     rev: v3.15.2
     hooks: