Watch

mirror of https://github.com/tj-actions/bandit synced 2026-07-24 00:03:45 +00:00

No description

Dockerfile 52.9%
Python 32%
Shell 15.1%

Find a file

Repository files (latest commit first)
Filename	Latest commit message	Latest commit date
Tonye Jack b127b53305 Deleted .github/workflows/rebase.yml		2025-03-23 06:11:32 -06:00
.github	Deleted .github/workflows/rebase.yml	2025-03-23 06:11:32 -06:00
test_package	Update setup.py	2022-01-01 17:56:15 -05:00
.all-contributorsrc	docs: create .all-contributorsrc [skip ci]	2021-06-09 23:16:30 +00:00
.gitignore	Initial commit.	2021-01-14 10:06:52 -05:00
.whitesource	Added .whitesource	2021-07-02 12:52:34 -04:00
action.yml	Update action.yml	2023-01-02 03:05:33 -07:00
CODE_OF_CONDUCT.md	Added CODE_OF_CONDUCT.md	2021-07-02 16:43:52 -04:00
CONTRIBUTING.md	Initial commit.	2021-01-14 10:06:52 -05:00
Dockerfile	Bump python from 3.11.3-slim-buster to 3.11.4-slim-buster	2023-06-08 14:59:44 -06:00
entrypoint.sh	Update entrypoint.sh	2021-07-05 17:00:50 -04:00
HISTORY.md	Upgraded from v5.4 -> v5.5	2023-09-07 16:27:56 +00:00
LICENSE	Initial commit.	2021-01-14 10:06:52 -05:00
OPTIONS.md	Update OPTIONS.md	2023-01-02 03:12:14 -07:00
README.md	Updated README.md	2023-09-07 16:33:15 +00:00
requirements.txt	chore(deps): update dependency bandit to v1.8.3 (#303 )	2025-02-17 08:41:26 +00:00

README.md

bandit

bandit is a security linter from PyCQA

Usage

Minimal version

...
    steps:
      - uses: actions/checkout@v2
      - name: Run bandit
        uses: tj-actions/bandit@v5.1

Using inputs

...
    steps:
      - uses: actions/checkout@v2
      - name: Run bandit
        uses: tj-actions/bandit@v5.1
        with:
          targets: |  # or a single string "." 
            test_package
          options: "-r"

If you feel generous and want to show some extra appreciation:

Support this project with a ⭐

Inputs

INPUT	TYPE	REQUIRED	DEFAULT	DESCRIPTION
options	string	false	`"-r"`	Extra options passed directly to bandit. See: OPTIONS.md for available choices
targets	string	true	`"."`	Module(s)/Package(s) to run bandit checks