bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported7 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- Bandit 1.6.3 does not respect excluded paths from .bandit file
- blacklist getattr calls
- Inclusive terminology
- How to exclude .bandit inside folder scan ?
- hardcoded_password_string is not triggerend when using python typing
- More control over exit code
- missing expected elements (e.g. errors, failures, testcase list, ... ) if no failures in xml output file
- Neat way to call bandit natively in python without relying on the CLI
- #nosec is not working for multiline assert.
- Enhancement: Remove redundant code using list comprehension
- Docs
- Python not yet supported