---
title: "Discussion on \"Scan HTTP Security Headers in Python and Fail CI When HSTS or CSP Is Missing\" | Hashnode"
description: "Discussion on \"Scan HTTP Security Headers in Python and Fail CI When HSTS or CSP Is Missing\". A stdlib CLI that checks HSTS, CSP, and X-Content-Type-Options, treats frame protection and Referrer-Policy as recommended, and exits 1 so GitHub Actions can block a bad deploy"
url: "https://hashnode.com/posts/scan-http-security-headers-in-python-and-fail-ci-when-hsts-or-csp-is-missing/6aefcd0bcfea6fd9ceb57bfc"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Scan HTTP Security Headers in Python and Fail CI When HSTS or CSP Is Missing](https://jadenvo259.hashnode.dev/scan-http-security-headers-in-python-and-fail-ci-when-hsts-or-csp-is-missing?utm_source=hashnode&utm_medium=feed)

A stdlib CLI that checks HSTS, CSP, and X-Content-Type-Options, treats frame protection and Referrer-Policy as recommended, and exits 1 so GitHub Actions can block a bad deploy

3d ago · 7 min read · jadenvo259.hashnode.dev  
Read the article

-   [#webdev](https://hashnode.com/tag/webdev)
-   [#devops](https://hashnode.com/tag/devops)
-   [#tutorial](https://hashnode.com/tag/tutorial)
-   [#python](https://hashnode.com/tag/python)
-   [#security](https://hashnode.com/tag/security)

## Written by

[Jaden Vo](https://hashnode.com/@jadenvo259)

@jadenvo259

  
[View profile](https://hashnode.com/@jadenvo259)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.