Language / Framework: Python
Bandit is a tool designed to find common security issues in Python code.
To enable Bandit analysis, add the following to your
.codeclimate.yml configuration file:
plugins: bandit: enabled: true
More information about the CLI is available in the README here: https://github.com/codeclimate/codeclimate
The Bandit plugin supports the native
.bandit.yml config files. You can select the specific test plugins to run and override default Bandit configuration using this file. More information on the config file can be found in Bandit's documentation.
Updated about a year ago