fosstars-rating-core
fosstars-rating-core copied to clipboard
Bandit scan can be triggered in other ways than GitHub actions
It is found that Bandit can be triggered in other ways
- https://github.com/PyCQA/bandit#version-control-integration
- Existence of
.bandit
file https://github.com/PyCQA/bandit#per-project-command-line-args - Check for more possible configurations as listed above.
Improve on the existing BanditDataProvider
DoD:
- Complete the above things and integrate them into the current data provider.
- Duplicate methods may be existing with
CodeqlDataProvider
refactor to remove redundancies.