lukehinds/Bandit Code Scan
Run Bandit code scans on your Python codebase
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| GITHUB_TOKEN | GitHub token | yes | — |
| recursive | Find and process files in subdirectories | no | false |
| aggregate | Aggregate output by vulnerability or by filename | no | vuln |
| context_lines | Maximum number of code lines to output for each issue | no | — |
| config_file | Optional config file to use | no | — |
| profile | Profile to use | no | — |
| tests | Comma-separated list of test IDs to run | no | — |
| skips | Comma-separated list of test IDs to skip | no | — |
| severity_level | Report only issues of a given severity level or higher | no | — |
| confidence_level | Report only issues of a given confidence level or higher | no | — |
| verbose | Output extra information like excluded and included files | no | false |
| debug | Turn on debug mode | no | false |
| quiet | Only show output in the case of an error | no | false |
| ignore_nosec | Do not skip lines with # nosec comments | no | false |
| exclude_paths | Comma-separated list of paths to exclude from scan | no | — |
| baseline | Path of a baseline report to compare against | no | — |
| ini_path | Path to a .bandit file that supplies command line arguments | no | — |
| path | Path to scan | yes | . |
| level | Report only issues of a given severity level or higher | no | low |
| confidence | Report only issues of a given confidence level or higher | no | low |
| exit_zero | Exit with 0, even with results found | no | false |
Outputs
no outputs