Python
Applicability
Snyk supports Python for code analysis and Python for open source.
For specific information about the use of versions and package managers, See Snyk CLI for Python and Git repositories and Python.
Check the language availability to be imported as an application, tested, or monitored using the Snyk products.
Available functions:
SCM import. For Python used with Snyk Open Source, the SCM import is available for Pip, pipenv, and Poetry.
Test or monitor your app through CLI and IDE.
Test your app's SBOM using pkg:pypi
Test your app's packages using pkg:pypi
Package managers
This language supports Pip, Poetry, pipenv, and setup.py as package managers. For the list of supported Python versions, check the Git repositories and Python page.
As a package registry, pypi.org is supported.
Frameworks and libraries
The following frameworks and libraries are supported in Snyk for Python:
AioHTTP - Comprehensive a
iopg - Comprehensive
argparse - Comprehensive
anthropic - Comprehensive
bottle - Comprehensive
CherryPy - Comprehensive
Django - Comprehensive
defusedxml - Comprehensive
fastapi - Partial
flask - Comprehensive
flask_pymongo - Comprehensive
google.cloud.bigquery - Comprehensive
google_generativeai - Comprehensive
huggingface_hub - Comprehensive
httpx - Comprehensive
ldap3 - Comprehensive
libxml - Comprehensive
lxml - Comprehensive
mistralai - Comprehensive
mongoengine - Comprehensive
openai - Comprehensive
pandas - Partial
paramiko - Comprehensive
peewee - Comprehensive
pickle - Comprehensive
pilyaml - Comprehensive
pyca/cryptography - Comprehensive
pymongo - Comprehensive
pymssql - Comprehensive
pyramid - Comprehensive
psycopg - Comprehensive
python-ldap - Comprehensive
Python Standard Library - Comprehensive
requests - Comprehensive
sqlite3 (or pysqlite2) - Comprehensive
sqlalchemy - Comprehensive
turboGears - Comprehensive
urllib - Comprehensive
werkzeug - Comprehensive
Features
The following features are supported in Snyk for Python:
Fix PRs
License scanning
Reports
Custom rules
Interfile analysis
Python version support
Some Python Projects may contain dependencies that require specific versions of Python. Therefore, the version of Python used when scanning can affect the dependency tree that Snyk generates.
You can specify the version of Python that Snyk uses to scan dependencies in both the CLI and Git integration.
See Snyk CLI for Python for information about the Python version and installation and use information for Pip, Poetry, Pipevn, and setup.py.
See Git repositories and Python for information about the Python version and installation and use for Python and pip and use of Poetry and pipenv.
Pipenv and Python versions supported
Supported Python versions are 3.8, 3.9, 3.10, 3.11, 3.12.
Snyk uses Python version information specified in each Pipfile to choose the major and minor versions to use in scanning, for example:
Specific patch versions are ignored; Snyk uses a recent patch version from each series.
Snyk defaults to Python 3.10 if the Pipfile contains:
No Python version information
Only a major version
An unsupported version
Poetry and Python versions supported
There is no need to tell Snyk the Python version for Poetry Projects.
Poetry files contain sufficient information to build a full dependency tree without running native tooling.
IDE and CI/CD with Snyk for Python
If you are using any of the supported IDEs to write Python, there are some configurations you must add to scan Python manifest files properly.
If you are using a virtual environment, you must add the PYTHON_PATH to the Additional Options text input in the Snyk integration settings, for example, --command=.venv/bin/python. Snyk tries to look for a *req*.txt file in the root of the Project as it is seen in the IDE.
However, if you have manifest files in other directories within the root of the Project, Snyk cannot identify them. For Snyk to find them, you must use the --all-projects option. Snyk then recursively searches each Project directory to find all the manifest files.
If those directories each require a different virtual environment to run, the Snyk scan will not be successful because it will use one virtual environment to search for installed dependencies. In this case, it is best to use the CLI or the Git integration rather than an IDE to get vulnerability information on all the dependencies listed in each Project directory.
Troubleshooting Snyk for Python
If you need help, contact Snyk Support.
Last updated