[suggestion] Python Code Security Plugin, Pixeebot (Free Installation for Open Source)

[pixeeai]

Is your feature request related to a bug? Please describe. Pixeebot helps improve project's codebase via opening PRs to help improve code security, squashing bugs, common vulnerabilities, common Sonar or CodeQL issues & more.

Describe the solution you'd like Installing the Pixeebot plugin located within the GitHub marketplace -> Install Here

Describe alternatives you've considered N/A - think of it as a more advanced version of dependabot

Additional context Visit either of the following for more documentation about Pixee.

• https://pixee.ai
• https://docs.pixee.ai

[Alek99]

Does this bot just go to repos opening up issues for people to use there product lol

[pixeeai]

@Alek99 No, I worked with the Pixee team & I manually opened it 👍

I will fork you repo & send over some recommendations the bot finds.

Thanks, Zach

[pixeeai]

@Alek99 @Lendemor These are the generated PRs so far:

• Enable Jinja2 Autoescape
• Sandbox Process Creation
• Secure Source of Randomness

[Lendemor]

I'm not sure about introducing another dependency for the 2nd one. Guess we could take the third one 🤔

[pixeeai]

I'm not sure about introducing another dependency for the 2nd one. Guess we could take the third one 🤔

Yeah, I agree. Typically, most companies tend to focus on the findings that don't require additional dependencies first and then circle back to the ones that do later on to reevaluate if adding the additional dependency will be worth it for what is being added.