scan_conan_dependencies
Scans Conan projects or specific packages for security vulnerabilities using the audit.conan.io service, analyzing transitive dependencies when a path is provided or a single reference for targeted audits.
Instructions
⚠️ WARNING: This tool makes an API call to audit.conan.io service. Only use when explicitly requested by the user.
Requires provider authentication. If you dont have any yet you can get a token by signing up for a free at https://audit.conan.io/register
Audit a Conan project or a specific package for security vulnerabilities using the audit.conan.io service.
When using path: Scans the conanfile and all its transitive dependencies for vulnerabilities.
When using reference: Scans only the vulnerabilities of that specific package reference, but NOT its dependencies.
There is a limit of 100 API calls per day. If the limit is reached, the tool will return an error.
Use path to scan the complete graph of dependencies. Use reference to audit a specific package.
Do not use both path and reference at the same time.
Args:
work_dir: Working directory where the command should be executed. Always required.
path: This path is ALWAYS relative to work_dir. For example, if work_dir is "/home/user/project" and path is "conanfile.txt", it will resolve to "/home/user/project/conanfile.txt". When using path, all transitive dependencies will be scanned for vulnerabilities.
reference: Conan reference to audit. For example, "fmt/12.0.0". Use it in case the user provides a specific reference to audit. Use it instead of path. When using reference, only the vulnerabilities of that specific package reference will be scanned, but NOT its dependencies.
Returns:
Dictionary containing the result of the audit scan.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| work_dir | Yes | Working directory where the command should be executed. Always required. | |
| path | No | Path to the folder relative to working directory containing the recipe of the project or to a recipe file conanfile.txt/.py | |
| reference | No | Conan reference to audit. For example, 'fmt/12.0.0'. |