Input filenames instead of --stdin

--stdin is rather inflexible in that it requires a shell or other means of piping data to the executable.

I’m proposing a --input-file which works similarly but obsoletes --stdin

cat requirements.txt | safety --stdin becomes safety -- requirements.txt

echo 'x==1' | safety --stdin becomes echo 'x==1' | safety -- /dev/stdin

etc.

[jayfk]

No, -r also tries to read referenced files.

If you have a requirements.txt like this:

django=1.2.3
-r main.txt

and you read that from stdin, you have no way to tell where main.txt is located.

If you read in the file and have a file path, you can resolve main.txt and read that too.

[asottile]

At least with unix tools, they strive to make things not have two-ways-to-do-things, the primary reason I opened this ticket 😃