Welcome to Bandit

Bandit is a tool designed to find common security issues in Python code. To do this, Bandit processes each file, builds an AST from it, and runs appropriate plugins against the AST nodes. Once Bandit has finished scanning all the files, it generates a report.

Using and Extending Bandit

• Getting Started
• Configuration
• Test Plugins
• Blacklist Plugins
• Report Formatters
• Frequently Asked Questions

Contributing

• Source code

• Issue tracker

• Join us on Discord

Indices and tables

• Index

• Module Index

• Search Page

License

The bandit library is provided under the terms and conditions of the Apache License 2.0