bandit

bandit copied to clipboard

ini "exclude" config is ignored

11

**Describe the bug** **exclude** configuration inside **.bandit** ini file is always ignored due to default cli argument. **To Reproduce** Steps to reproduce the behavior: 1. Create . bandit file with...

RobGThai

### Describe the bug Bandit 1.7.1 no longer appends CLI-provided excluded paths to those provided in the `.ini` file, but rather substitutes the excluded paths list, which contradicts the doc:...

upcFrost

Add check for potential misuse of unicode

1

**Is your feature request related to a problem? Please describe.** Recently some possible misuses of unicode characters were described. See [PEP 672](https://www.python.org/dev/peps/pep-0672/) for a description. **Describe the solution you'd like**...

CarliJoy

Add config via setup.cfg

4

**Is your feature request related to a problem? Please describe.** I'd like to use single `setup.cfg` file for many different linters/plugins/style checkers. Currently bandit requires to have special config for...

okainov

### Describe the bug Hi, We use pscopg2 and have the following query: ``` # Now to get all user preferences for the user id sql_str = 'SELECT "user_preference"."preference_app_id","user_preference"."value", '...

BenjaminJanes

SQL Injection flagged when concatenating strings

6

### Describe the bug It seems that when concatenating strings in a `cur.execute()` call, it flags up sql injection possibilities, even though all the string arguments are being passed into...

Dreamsorcerer

Error parsing pyproject.tml

4

### Describe the bug Hi ! I'm following the documentation** to provide a custom setup for bandit to exclude some tests (B101) in our testing framework but I get the...

edgarriba

Bandit fails when running as part of pre-commit

2

### Describe the bug I'm using the following configuration in pre-commit: ``` repos: - repo: https://github.com/ambv/black rev: 19.10b0 hooks: - id: black language_version: python3.7 - repo: https://github.com/pre-commit/mirrors-mypy rev: v0.790 hooks:...

efimk-lu

Allow outputting the report in multiple formats

6

**Is your feature request related to a problem? Please describe.** In some cases, it is desirable to have the report in multiple different formats. **Describe the solution you'd like** Allow...

stefanfoulis

missing expected elements (e.g. errors, failures, testcase list, ... ) if no failures in xml output file

3

Several build tools require that the output files from various code analysis tools be in the junit-xml format. I can see how to output to xml using bandit, but not...

roalexan