Skip to content

Support for uv (and pyproject.toml?) package management #542

@kylewardlow

Description

@kylewardlow

Is your feature request related to a problem? Please describe.
The scanning feature in the VSCode plugin fails to detect extremely basic secrets in pyproject.toml files in a project under management by uv, of the form
https://:@
as described in the extension documentation

Describe the solution you'd like to see
Support for secret scanning and detection with uv as the package manager and using the modern pyproject.toml project structuring format, instead of requirements.txt or Poetry's bespoke format/solution, is the feature I would like to request.

Describe alternatives you've considered
I have considered but not explored setting up custom scanning rules, but this seems to be the domain of the extension provider. End users should not have to set up the same/similar regex ruleset duplicated multiple times over to enable this functionality.

Additional context
Astral's uv is a rapidly maturing Python project management tool that offers significant advantages over current solutions in this space. Support in the JFrog VSCode extensions would be an incredible value-add, as Python users are

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions