PyCQA / bandit

Bandit is a tool designed to find common security issues in Python code.
https://bandit.readthedocs.io
Apache License 2.0
6.5k stars 610 forks source link

Add a custom plugin from configuration instead of setuptools #1188

Open 4br3mm0rd opened 1 month ago

4br3mm0rd commented 1 month ago

Hi everyone!

Is your feature request related to a problem? Please describe. I am writing a custom bandit plugin for my project and from what I understand, I need to add an entrypoint to my setup.py file and run pip install -e in order to get it to work. Since I am running it as a pre-commit hook, it is even more frustrating and I have no idea how to do it. Am I missing something?

Describe the solution you'd like I want to be able to add to my pyproject.toml file, under tools.bandit:

plugins = ["xxx = xxx.xxx:x"]

and to have bandit automatically load it when loading the config.

Describe alternatives you've considered No answer.

Additional context No answer.

Love this idea? Give it a 👍. We prioritize fulfilling features with the most 👍.

Thank you!