Security

This page describes the invoke_tasklib.security module.

Overview

Task	Behavior
security.audit	Audits installed dependencies for known vulnerabilities (read-only)

Usage

invoke security.audit

This runs uv run pip-audit, which checks the currently installed dependencies against known vulnerability databases (via PyPI's Advisory Database) and exits non-zero if any known vulnerability is found.

Since it audits installed packages, run env.install first if dependencies haven't been installed yet.

See Also

• Env: env.install to install the dependencies this task audits.
• invoke_tasklib.security reference
• Troubleshooting: fixes for "command not found" errors.