-
Notifications
You must be signed in to change notification settings - Fork 38
Description
Is your feature request related to a problem? Please describe.
The scanning feature in the VSCode plugin fails to detect extremely basic secrets in pyproject.toml files in a project under management by uv, of the form
https://:@
as described in the extension documentation
Describe the solution you'd like to see
Support for secret scanning and detection with uv as the package manager and using the modern pyproject.toml project structuring format, instead of requirements.txt or Poetry's bespoke format/solution, is the feature I would like to request.
Describe alternatives you've considered
I have considered but not explored setting up custom scanning rules, but this seems to be the domain of the extension provider. End users should not have to set up the same/similar regex ruleset duplicated multiple times over to enable this functionality.
Additional context
Astral's uv is a rapidly maturing Python project management tool that offers significant advantages over current solutions in this space. Support in the JFrog VSCode extensions would be an incredible value-add, as Python users are