How about making trivy available as a pypi.org package?

[seebi]

Description

Some non-python dev-tools are available as binary packages on pypi.org (some of them named toolname-bin). This allows for adding them as dev dependencies in our python projects simply by using our normal dependency managers (poetry, uv, ...).

I believe the python community would greatly benefit from trivy, if its available as trivy-bin.

Anyone here supporting this? 🤓

Target: Python Project Repositories (.venv -> File System, git Repository)
Scanner: Vulnerability, Secret, SBOM Generation

Target

Filesystem

Scanner

Vulnerability

[nikpivkin]

Hi @seebi !

Do you mean these binary packages?

[seebi]

This is one example how to produce them, yes. I also tried to propose trivy there as well: justin-yan/pybin#57

Here is another project which produces binary packages for pip: https://github.com/Bing-su/pip-binary-factory