The code hosting service GitHub added Python to the list of programming languages that it is able to auto-scan for known vulnerabilities. GitHub security alerts feature introduced in November is designed to alert developers when one of their projects dependencies has known flaws. An initial scan conducted by GitHub revealed more than 4 million vulnerabilities in more than 500,000 repositories. The company confirmed that the scanner is enabled by default on public repositories, while private repositories need to opt into security alerts, or by giving the dependency graph access to the repo from the Insights tab.”]
Source: https://securityaffairs.co/wordpress/74481/security/github-supports-python-scan.html