actions-marketplace-validations/Bandit Scanner
Run a Bandit scan to find security issues in your Python code
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 10, 2026
- License
- ISC
Pinned Snippet
uses: actions-marketplace-validations/devsecninja_python-bandit-scan@781355b6f59116d5e1f09377cbcff9f93d3a1bad # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | File or directory to run bandit on | no | . |
| level | Report only issues of a given severity level or higher. Can be LOW, MEDIUM or HIGH. Default is UNDEFINED (everything) | no | UNDEFINED |
| confidence | Report only issues of a given confidence level or higher. Can be LOW, MEDIUM or HIGH. Default is UNDEFINED (everything) | no | UNDEFINED |
| excluded_paths | comma-separated list of paths (glob patterns supported) to exclude from scan (note that these are in addition to the excluded paths provided in the config file) (default: .svn,CVS,.bzr,.hg,.git,__pycache__,.tox,.eggs,*.egg) | no | DEFAULT |
| exit_zero | exit with 0, even with results found | no | DEFAULT |
| skips | comma-separated list of test IDs to skip | no | DEFAULT |
| ini_path | path to a .bandit file that supplies command line arguments | no | DEFAULT |
| config_path | path to a config file (YAML or pyproject.toml) for bandit | no | DEFAULT |
| GITHUB_TOKEN | Github token of the repository (automatically created by Github) | yes | — |
Outputs
no outputs