code.banditBandit Python SAST
Runs Bandit over Python sources (static analysis only, the code is never imported or executed). Skipped when the workspace has no .py files.
- Engine
- Wrapped scanner
- Wraps
bandit- Targets
- Codebase
- Areas
- Security
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only code.banditWraps bandit. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.