bandit
https://github.com/pycqa/bandit
Python
Bandit is a tool designed to find common security issues in Python code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported6 Subscribers
Add a CodeTriage badge to bandit
Help out
- Issues
- [WIP] use bandit.yml as default config file (resolves #318)
- Allow outputting the report in multiple formats
- Add a plugin to detect os.join with input
- `bandit -rf custom` only shows up to 3 warnings
- yaml_load should not be B5xx cryptography group
- Add a nice Bandit banner
- B404-B603- Categorisation as warnings
- Baseline file has operation system dependent format
- Report mutable class attributes as warning
- No detection when passing keyword args to subprocess/shell functions
- Docs
- Python not yet supported