Detect pyup as an automated dependency update tool (#2226)

Signed-off-by: Jeremy Katz <jeremy@tidelift.com> Signed-off-by: Jeremy Katz <jeremy@tidelift.com>
ossf · Sep 1, 2022 · f345807 · f345807
1 parent d13ba3f
commit f345807
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/checks/raw/dependency_update_tool.go b/checks/raw/dependency_update_tool.go
@@ -99,6 +99,19 @@ var checkDependencyFileExists fileparser.DoWhileTrueOnFilename = func(name strin
 				},
 			},
 		})
+	case ".pyup.yml":
+		*ptools = append(*ptools, checker.Tool{
+			Name: "PyUp",
+			URL:  asPointer("https://pyup.io/"),
+			Desc: asPointer("Automated dependency updates for Python."),
+			Files: []checker.File{
+				{
+					Path:   name,
+					Type:   checker.FileTypeSource,
+					Offset: checker.OffsetDefault,
+				},
+			},
+		})
 	default:
 		// Continue iterating.
 		return true, nil

diff --git a/checks/raw/dependency_update_tool_test.go b/checks/raw/dependency_update_tool_test.go
@@ -110,6 +110,15 @@ func Test_checkDependencyFileExists(t *testing.T) {
 			want:    false,
 			wantErr: false,
 		},
+		{
+			name: ".pyup.yml",
+			args: args{
+				name: ".pyup.yml",
+				data: &[]checker.Tool{},
+			},
+			want:    false,
+			wantErr: false,
+		},
 	}
 	for _, tt := range tests {
 		tt := tt