bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported6 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- hardcoded_password_string is not triggerend when using python typing
- More control over exit code
- Update calls.py with additional rulesets
- missing expected elements (e.g. errors, failures, testcase list, ... ) if no failures in xml output file
- Neat way to call bandit natively in python without relying on the CLI
- #nosec is not working for multiline assert.
- Enhancement: Remove redundant code using list comprehension
- Enhancement Added list comprehension
- create_subprocess_exec/shell
- Detect /bin/bash -c "end-run" around Shell=True checking
- Docs
- Python not yet supported