bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported8 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- Bump docker/login-action from 4.4.0 to 4.5.1
- Detect requests.request() calls without a timeout in B113
- Add cloudpickle to pickle blacklists (B403/B301)
- Troubles with conflicting cryptography and cffi
- feat: add B905 plugin for Flask send_file() with request-controlled path
- Detect unsafe tarfile extract calls
- Docs
- Python not yet supported