bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported6 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- Avoid calls to ast in plugins
- Skip tests folder on pre-commit
- List all CWEs associated to the current configuration
- Adding option to not print line's number: --no-line-numbers
- Create an extension for parsers
- Add a configuration option to prohibit `# nosec` without specific error codes
- Bandit does not identify hard coded password for DB connection variable
- Add flask.Markup XSS plugin
- Use a table format for list of plugins
- Add ability to filter results by CWE
- Docs
- Python not yet supported