Add Bandit security scanning to CI

airbnb / binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

https://binaryalert.io

Apache License 2.0

1.4k stars 187 forks source link

Add Bandit security scanning to CI #100

Closed austinbyers closed 6 years ago

austinbyers commented 6 years ago

to: @javuto cc: @airbnb/binaryalert-maintainers size: small

Background

Bandit is a Python scanner which checks for common security issues in Python source code.

Changes

Add Bandit to the requirements
Add Bandit configuration and enforce in CI
Update requirements

Tested

To run locally: bandit -r .
Travis CI
Approved by Smokey and The Bandit:

img_20170321_090059

coveralls commented 6 years ago

Coverage remained the same at 92.787% when pulling fb7d79e5d582c6951b040d4f035216ba44a51ebf on austin-bandit into f8141d47223ff29a5c520f589c5128ad7aebeefc on master.

coveralls commented 6 years ago

Changes Unknown when pulling 5ac0b11b5397020ec8c50e2f8513e88c39115a3e on austin-bandit into on master.