bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported7 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- `bandit -ii -ll -ii -ll` raises an `IndexError`
- Add B203: zipfile.extractall without path validation (Zip Slip / CWE-22)
- Detect empty-string wildcard host in B104 bind() calls
- fix: detect unsafe tarfile.extract() in B202
- Fix #nosec with test ID not counted in Total lines skipped
- Detect verify=False on Session/Client instance methods in B501
- Detect dangerous chmod with stat module constants in B103
- Detect unsafe tarfile.extract() in B202 plugin
- Fix B501 false negative: detect verify=False on Session/Client instances
- Avoid UnicodeEncodeError on narrow-encoding output streams (#1251)
- Docs
- Python not yet supported