bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported8 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- fix(B104): detect empty string '' as wildcard bind address
- Feature request: Adding Canary Credentials to detect supply chain compromise
- Avoid full report when all files are skipped
- fix: clamp severity/confidence index to prevent IndexError (closes #1423)
- `bandit -ii -ll -ii -ll` raises an `IndexError`
- Add B203: zipfile.extractall without path validation (Zip Slip / CWE-22)
- Detect empty-string wildcard host in B104 bind() calls
- fix: detect unsafe tarfile.extract() in B202
- Fix #nosec with test ID not counted in Total lines skipped
- Detect verify=False on Session/Client instance methods in B501
- Docs
- Python not yet supported