python-bandit can't cope with many exclusions - Githubissues

hawkeyesec / scanner-cli

A project security/vulnerability/risk scanning tool

Other

358 stars 89 forks source link

python-bandit can't cope with many exclusions #147

Open z0u opened 4 years ago

z0u commented 4 years ago

Description

python-bandit is passed a list of all files to exclude. In my case that causes that module to fail with:

[error] python-bandit returned an error! spawn E2BIG

Which apparently means the argument list for the subprocess is too long.

Steps to Reproduce

Create a directory .venv with ~6400 Python files in it*.
Run hawkeye scan --exclude .venv

* This can happen if e.g. your virtual environment directory or build directory are in the project directory.

Expected behavior: python-bandit should run.

Actual behavior: python-bandit fails with the error [error] python-bandit returned an error! spawn E2BIG

Version

Hawkeye v1.7.1 Python-bandit 1.6.2

Additional Information

Issue seems to be how the command is constructed on python-bandit/index.js:28.