Code Climate Engine to run Bandit.
Bandit is a tool designed to find common security issues in Python code.
git clone https://github.com/noqcks/codeclimate-bandit
cd codeclimate-bandit
make release
.codeclimate.yml
plugins:
bandit:
enabled: true
And then run the engine:
codeclimate analyze
The engine supports the native config file for Bandit. You can select the specific test plugins to run and override default Bandit configuration using this file. More information on the config file can be found in the Bandit documentation.
A .bandit.yaml included at the root of your project will be included during engine run.
Example .bandit.yaml:
skips: ['B101', 'B601', 'B404']
- support different locations of .bandit.yaml