Pybuilder plugin for bandit security linter
Project description
pybuilder-bandit
A pybuilder plugin that analyzes your project for common security issues using bandit
. Bandit is a security linter for Python code, for more information refer to the bandit pypi page.
To add this plugin into your pybuilder project, add the following line near the top of your build.py:
use_plugin('pypi:pybuilder_bandit', '~=0.1.0')
NOTE version v0.1.x
of this plugin will only work with version v0.11.x
of Pybuilder.
Pybuilder bandit properties
The pybuilder task pyb bandit
will use bandit to scan your project to find common security issues, verbose mode will display to the screen any issues found. The following plugin properties are available to further configure the scan.
Name | Type | Default Value | Description |
---|---|---|---|
bandit_fail_build | bool | False | Fail build if scan detects any issues |
bandit_confidence_level | str | LOW | Report only issues of a given confidence level or higher: LOW, MEDIUM, HIGH |
bandit_severity_level | str | LOW | report only issues of a given severity level or higher: LOW, MEDIUM, HIGH |
bandit_skip_ids | str | None | comma-separated list of test IDs to skip |
The plugin properties are set using project.set_property
, the following is an example of how to set the properties:
project.set_property('bandit_fail_build', True)
project.set_property('bandit_confidence_level', 'LOW')
project.set_property('bandit_severity_level', 'MEDIUM')
project.set_property('bandit_skip_ids', 'B110,B315')
Development
Clone the repository and ensure the latest version of Docker is installed on your development server.
Build the Docker image:
docker image build \
-t \
pybbandit:latest .
Run the Docker container:
docker container run \
--rm \
-it \
-v $PWD:/pybuilder-bandit \
pybbandit:latest \
/bin/sh
Execute the build:
pyb -X
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for pybuilder_bandit-0.1.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 31fb3bccc9ca1da46baa425db0b5bfaf32323e02f14aee329eaad607c373cde8 |
|
MD5 | 0b6758dadf1ee0f77ca2fbd870bff40e |
|
BLAKE2b-256 | c24f034325839299d1857799dabe396ebb6f56639db456a9f0f9d2716152a226 |