PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.
https://bandit.readthedocs.io
Apache License 2.0
6.51k stars 612 forks source link

Lack of documentation for PyCQA/bandit-action #1169

Closed Killpit closed 2 months ago

Killpit commented 3 months ago

I tried looking at bandit-action docs at your official site and GitHub and I couldn't find any detailed explanation and implementation to study. For people who want to use them, it can be discouraging and also confusing to when to use all the parameters mentioned in GitHub Actions pipelines. In short, I recommend having a docs section explaining how we can implement in GitHub Actions and all parameters explaining it.