bandit-python

Overview

Per bandit.readthedocs.io/en/latest/start.html:

Bandit is the Python-specific SAST originally from OpenStack Security. Each finding has two dimensions:

• Severity (LOW / MEDIUM / HIGH) - how dangerous if exploited
• Confidence (LOW / MEDIUM / HIGH) - how certain Bandit is the finding is real

The two-dimensional scoring lets you tune false-positive vs false-negative tradeoff per project.

When to use