microsoft / code-with-engineering-playbook

This is the playbook for "code-with" customer or partner engagements
https://microsoft.github.io/code-with-engineering-playbook/
Creative Commons Attribution 4.0 International
2.15k stars 568 forks source link

Add bandit to code review #1051

Closed ShakutaiGit closed 1 month ago

ShakutaiGit commented 1 month ago

Pull Request Template

What are you trying to address

Enhancement of Code Security Practices: Added documentation for the Bandit tool, a static analysis security tool designed by the Python Code Quality Authority (PyCQA). This addition aims to improve the security practices within our Python projects by providing guidelines on how to integrate and use Bandit to identify potential security issues in the codebase. The motivation for this update is to ensure our code not only meets quality standards but also adheres to best practices in security.

Checklist

READY TO PR? Use the check-list below to ensure your branch is ready for PR.

Note: You may see link check errors on pages you have not touched. This is normal, and due to either broken links or sites that reject link checker bots. The reviewer will help you get to a green state on these.

shiranr commented 1 month ago

Looks good to me, thank you for your contribution. @TessFerrandez / @tompaana / @nyouens Can one of you please approve?