tylerwince / flake8-bandit

Automated security testing using bandit and flake8.
MIT License
111 stars 23 forks source link

Does/Can/Will this plugin support configuration via `pyproject.toml`? #40

Open stdedos opened 2 years ago

togrul2 commented 1 year ago

Right now, it supports configuration only via .bandit file.

pascal456 commented 1 year ago

Now that Microsoft recommends this plugin for VSCode in official statement, I also want to switch soon. They are ending support for the distinct linter packages. I usually set up my Python projects with pyproject.toml as well. Therefore, I would also like this option very much

bersbersbers commented 1 year ago

Now that Microsoft recommends this plugin for VSCode in official statement

Given the almost non-existent activity on this repository, I wonder why Microsoft recommends this at all.

bersbersbers commented 1 year ago

I submitted two PRs, https://github.com/PyCQA/bandit/pull/1052 and https://github.com/tylerwince/flake8-bandit/pull/44. The two are doing similar things but could in principle by accepted independently.

bersbersbers commented 5 months ago

https://github.com/PyCQA/bandit/pull/1052 has been merged and released in 1.7.9. Would be great if flake8-bandit could follow that by including https://github.com/tylerwince/flake8-bandit/pull/44 in a new release.