Addressing integration issue with Socket Firewall Free #10815
Description
Issue Kind:
Other
Description
Given recent Supply Chain Attacks, it seems to be critical for poetry users to be able to plug in threat mitigation tools.
Socket Firewall is freely available to the community as a simple wrapper around package managers. For npm, it's as simple as sfw npm install some_dangerous_package.
It works with bare pip and uv but not with Poetry, as explained here.
Quoting from Footnotes
Poetry has issues utilizing a proxy for package management requests. Poetry is not supported at this time.
Given how serious these supply chain attacks are, I wanted to issue this feature request, hoping to get community attention / support for this.
Are there any known alternatives currently working with poetry?
Impact
Be able to have supply chain mitigation tools around dependencies managed with poetry. pip and uv being now supported by sfw.
Workarounds
Not to my knowledge.