bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported7 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- Can't set (severity) level through `.bandit` ini file
- Fix ini config parsing
- More precise testing of plugins
- general_bad_file_permission only works for mode as int
- Avoid calls to ast in plugins
- Skip tests folder on pre-commit
- List all CWEs associated to the current configuration
- Adding option to not print line's number: --no-line-numbers
- Create an extension for parsers
- Add a configuration option to prohibit `# nosec` without specific error codes
- Docs
- Python not yet supported