Summary
Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs appropriate plugins against the AST nodes. Once Bandit has finished scanning all the files it generates a report.
Versions
v1.7.5-r1 :: 0 :: gentoo
- Modified
- License
- Apache-2.0
- Keywords
- amd64 arm64 x86 ~arm ~riscv
- USE flags
- test
USE flags
General
- test
- Enable dependencies and/or preparations necessary to run tests (usually controlled by FEATURES=test but can be toggled independently)
python_targets
- python3_10
- Build with Python 3.10
- python3_11
- Build with Python 3.11
Runtime Dependencies
dev-lang / python : An interpreted, interactive, object-oriented programming language
dev-python / GitPython : Library used to interact with Git repositories
dev-python / pbr : Inject some useful and sensible default behaviors into setuptools
dev-python / pyyaml : YAML parser and emitter for Python
dev-python / rich : Python library for rendering rich text, tables, etc. to the terminal
dev-python / stevedore : Manage dynamic plugins for Python applications
Bugs
- 797787
- dev-python/bandit-1.7.1 setuptools warnings detected
Change logs
- Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Arthur Zamarin · gentoo
dev-python/bandit: Stabilize 1.7.5-r1 ALLARCHES, #904181
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
dev-python/bandit: add dev-python/rich dep
Closes: https://bugs.gentoo.org/900659 Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Bump to 1.7.5
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Backport tomllib/tomli port
Closes: https://bugs.gentoo.org/878661 Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - David Seifert · gentoo
*/*: remove py3.8 from PYTHON_COMPAT
Signed-off-by: David Seifert <soap@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Arthur Zamarin · gentoo
dev-python/bandit: enable py3.11
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Jakov Smolić · gentoo
dev-python/bandit: keyword 1.7.4 for ~riscv
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
dev-python/bandit: drop ~s390
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Jakov Smolić · gentoo
dev-python/bandit: Stabilize 1.7.4 ALLARCHES, #836482
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Arthur Zamarin · gentoo
dev-python/bandit: add 1.7.4
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Bump to 1.7.3
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Jakov Smolić · gentoo
dev-python/bandit: Stabilize 1.7.2-r1 ALLARCHES, #834164
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Tested on py3.10
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Switch to PEP 517 build
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Bump to 1.7.2
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove unnecessary test deps
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Jakov Smolić · gentoo
dev-python/bandit: Stabilize 1.7.1 x86, #829108
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Arthur Zamarin · gentoo
dev-python/bandit: Stabilize 1.7.1 arm64, #829108
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org> - Jakov Smolić · gentoo
dev-python/bandit: Stabilize 1.7.1 amd64, #829108
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Arthur Zamarin · gentoo
dev-python/bandit: fix prepare calls
Fixes: 20c7c7acd861c0a462c611702587993a004faf14 Closes: https://bugs.gentoo.org/802564 Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org> - Arthur Zamarin · gentoo
dev-python/bandit: add 1.7.1
Closes: https://bugs.gentoo.org/812296 Closes: https://bugs.gentoo.org/786645 Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
Rename dev-python/{beautifulsoup → beautifulsoup4}
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
dev-python/bandit: Stabilize 1.7.0 arm64, #793320
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
dev-python/bandit: x86 stable wrt bug #793320
Package-Manager: Portage-3.0.13, Repoman-3.0.2 RepoMan-Options: --include-arches="x86" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
dev-python/bandit: amd64 stable wrt bug #793320
Package-Manager: Portage-3.0.13, Repoman-3.0.2 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
dev-python/bandit: Stabilize 1.6.2-r1 arm64, #730614
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - William Hubbs · gentoo
dev-python/bandit: 1.7.0 bump
This was approved by the maintainer. Closes: https://bugs.gentoo.org/761858 Signed-off-by: William Hubbs <williamh@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
*/*: Remove obsolete values from PYTHON_COMPAT
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Sam James · gentoo
dev-python/bandit: Keyword 1.6.2-r1 arm, #728612
Signed-off-by: Sam James <sam@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Agostino Sarubbo · gentoo
dev-python/bandit: amd64 stable wrt bug #731328
Package-Manager: Portage-3.0.8, Repoman-3.0.2 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Thomas Deutschmann · gentoo
dev-python/bandit: x86 stable (bug #731328)
Package-Manager: Portage-3.0.9, Repoman-3.0.2 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove old
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Matthew Thode · gentoo
dev-python/bandit: 1.6.2-r1 added to fix most testing
Closes: https://bugs.gentoo.org/733136 Package-Manager: Portage-3.0.8, Repoman-3.0.2 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Matthew Thode · gentoo
dev-python/bandit: set DISTUTILS_USE_SETUPTOOLS=rdepend
Closes: https://bugs.gentoo.org/748015 Package-Manager: Portage-3.0.8, Repoman-3.0.1 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
Move dev-python/{git-python → GitPython}
Use upstream package name, especially that there is another package called 'git-python' on PyPI. Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Matthew Thode · gentoo
dev-python/bandit: 1.6.2 bump
Closes: https://bugs.gentoo.org/710506 Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Matthew Thode · gentoo
dev-python/bandit: 1.5.1-r1 stable x86
Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Matthew Thode · gentoo
dev-python/bandit: 1.5.1 stable x86 with cleanup
Closes: https://bugs.gentoo.org/706412 Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Remove Python 2
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
*/*: Clean PYTHON_COMPAT of obsolete impls
Closes: https://github.com/gentoo/gentoo/pull/14246 Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - David Seifert · gentoo
dev-python/bandit: Remove old
Package-Manager: Portage-2.3.83, Repoman-2.3.20 Signed-off-by: David Seifert <soap@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Aaron Bauman · gentoo
dev-python/bandit: amd64 stable
Signed-off-by: Aaron Bauman <bman@gentoo.org> Package-Manager: Portage-2.3.80, Repoman-2.3.19 - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
dev-python/bandit: Fix MissingTestRestrict
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Michał Górny · gentoo
dev-python/bandit: dev-python/sphinx is NOT a test dependency
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Michał Górny · gentoo
*/*: Remove python3_4 PYTHON_COMPAT correctly
Signed-off-by: Michał Górny <mgorny@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Matthew Thode · gentoo
dev-python/bandit: added py37 to too many
Package-Manager: Portage-2.3.51, Repoman-2.3.12 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Matthew Thode · gentoo
dev-python/bandit: add py37 support
Package-Manager: Portage-2.3.51, Repoman-2.3.12 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> - Repository mirror & CI · gentoo
Merge updates from master - Mikle Kolyada · gentoo
dev-python/bandit: Add ~s390 keyword
Package-Manager: Portage-2.3.40, Repoman-2.3.9 - Mart Raudsepp · gentoo
Revert "dev-python/bandit: dekeyword on ~arm64 due to lost keywords on git-python"
This reverts commit 4cf335d7396fe7dff17c01c4bdf4845ddda0296b. - Mart Raudsepp · gentoo
dev-python/bandit: dekeyword on ~arm64 due to lost keywords on git-python - Zac Medico · gentoo
dev-python/bandit: Add python3_6 to PYTHON_COMPAT
Package-Manager: Portage-2.3.4, Repoman-2.3.2 - Robin H. Johnson · gentoo
Drop $Id$ per council decision in bug #611234.
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> - Matthew Thode · gentoo
dev-python/bandit: 1.4.0 stable amd64 and x86
Package-Manager: portage-2.3.3 - T. Malfatti · gentoo
media-libs/portaudio: Version bump - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.3.0 - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.3.0 - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.3.0 - Matthew Thode · gentoo
Merge branch 'newton-stable' - Matthew Thode · gentoo
dev-python/bandit: 1.1.0 stable amd64 and x86
Package-Manager: portage-2.3.0 - Michał Górny · gentoo
global: Drop dead implementations from PYTHON_COMPAT - Matthew Thode · gentoo
add initial support for newton (keystone)
dropped py3.3 and updated most (maybe all) to eapi6 - Matthew Thode · gentoo
doing the test - Matthew Thode · gentoo
openstack mass stable for mitaka, x86 and amd64 for bug 582170 - Matthew Thode · gentoo
dev-python/bandit: fix src_install
Package-Manager: portage-2.2.26 - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.2.26 - Justin Lecher · gentoo
dev-python/bandit: Add python3.5 support
Package-Manager: portage-2.2.27 Signed-off-by: Justin Lecher <jlec@gentoo.org> - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.2.26 - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.2.26 - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.2.24 - Agostino Sarubbo · gentoo
dev-python/bandit: x86 stable wrt bug #565742
Package-Manager: portage-2.2.20.1 RepoMan-Options: --include-arches="x86" - Agostino Sarubbo · gentoo
dev-python/bandit: amd64 stable wrt bug #565742
Package-Manager: portage-2.2.20.1 RepoMan-Options: --include-arches="amd64" - Agostino Sarubbo · gentoo
dev-python/bandit: x86 stable wrt bug #564826
Package-Manager: portage-2.2.20.1 RepoMan-Options: --include-arches="x86" - Agostino Sarubbo · gentoo
dev-python/bandit: amd64 stable wrt bug #564826
Package-Manager: portage-2.2.20.1 RepoMan-Options: --include-arches="amd64" - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.2.20.1 - Matthew Thode · gentoo
dev-python/bandit: adding die
Package-Manager: portage-2.2.20.1 - Matthew Thode · gentoo
dev-python/bandit: bup
Package-Manager: portage-2.2.20.1 - Matthew Thode · gentoo
dev-python/bandit: adding py33 support for liberty support (mitaka removes it)
Package-Manager: portage-2.2.20.1 - Matthew Thode · gentoo
dev-python/bandit: fixing /etc install location for bug 558062
Package-Manager: portage-2.2.20.1 - Matthew Thode · gentoo
dev-python/bandit: bup
Signed-off-by: Matthew Thode <prometheanfire@gentoo.org> Package-Manager: portage-2.2.20.1 - Matthew Thode · gentoo
dev-python/bandit: 0.13.1 bup - Robin H. Johnson · gentoo
proj/gentoo: Initial commit
This commit represents a new era for Gentoo: Storing the gentoo-x86 tree in Git, as converted from CVS. This commit is the start of the NEW history. Any historical data is intended to be grafted onto this point. Creation process: 1. Take final CVS checkout snapshot 2. Remove ALL ChangeLog* files 3. Transform all Manifests to thin 4. Remove empty Manifests 5. Convert all stale $Header$/$Id$ CVS keywords to non-expanded Git $Id$ 5.1. Do not touch files with -kb/-ko keyword flags. Signed-off-by: Robin H. Johnson <robbat2@gentoo.org> X-Thanks: Alec Warner <antarus@gentoo.org> - did the GSoC 2006 migration tests X-Thanks: Robin H. Johnson <robbat2@gentoo.org> - infra guy, herding this project X-Thanks: Nguyen Thai Ngoc Duy <pclouds@gentoo.org> - Former Gentoo developer, wrote Git features for the migration X-Thanks: Brian Harring <ferringb@gentoo.org> - wrote much python to improve cvs2svn X-Thanks: Rich Freeman <rich0@gentoo.org> - validation scripts X-Thanks: Patrick Lauer <patrick@gentoo.org> - Gentoo dev, running new 2014 work in migration X-Thanks: Michał Górny <mgorny@gentoo.org> - scripts, QA, nagging X-Thanks: All of other Gentoo developers - many ideas and lots of paint on the bikeshed