updates
This commit is contained in:
@@ -0,0 +1 @@
|
||||
pip
|
||||
@@ -0,0 +1,212 @@
|
||||
Metadata-Version: 2.4
|
||||
Name: bandit
|
||||
Version: 1.9.2
|
||||
Summary: Security oriented static analyser for python code.
|
||||
Home-page: https://bandit.readthedocs.io/
|
||||
Author: PyCQA
|
||||
Author-email: code-quality@python.org
|
||||
License: Apache-2.0
|
||||
Project-URL: Documentation, https://bandit.readthedocs.io/
|
||||
Project-URL: Release Notes, https://github.com/PyCQA/bandit/releases
|
||||
Project-URL: Source Code, https://github.com/PyCQA/bandit
|
||||
Project-URL: Issue Tracker, https://github.com/PyCQA/bandit/issues
|
||||
Project-URL: Discord, https://discord.gg/qYxpadCgkx
|
||||
Project-URL: Sponsor, https://psfmember.org/civicrm/contribute/transact/?reset=1&id=42
|
||||
Classifier: Development Status :: 5 - Production/Stable
|
||||
Classifier: Environment :: Console
|
||||
Classifier: Intended Audience :: Information Technology
|
||||
Classifier: Intended Audience :: System Administrators
|
||||
Classifier: Intended Audience :: Developers
|
||||
Classifier: Operating System :: POSIX :: Linux
|
||||
Classifier: Operating System :: MacOS :: MacOS X
|
||||
Classifier: Programming Language :: Python
|
||||
Classifier: Programming Language :: Python :: 3
|
||||
Classifier: Programming Language :: Python :: 3.10
|
||||
Classifier: Programming Language :: Python :: 3.11
|
||||
Classifier: Programming Language :: Python :: 3.12
|
||||
Classifier: Programming Language :: Python :: 3.13
|
||||
Classifier: Programming Language :: Python :: 3.14
|
||||
Classifier: Programming Language :: Python :: 3 :: Only
|
||||
Classifier: Topic :: Security
|
||||
Requires-Python: >=3.10
|
||||
License-File: LICENSE
|
||||
Requires-Dist: PyYAML>=5.3.1
|
||||
Requires-Dist: stevedore>=1.20.0
|
||||
Requires-Dist: rich
|
||||
Requires-Dist: colorama>=0.3.9; platform_system == "Windows"
|
||||
Provides-Extra: yaml
|
||||
Requires-Dist: PyYAML; extra == "yaml"
|
||||
Provides-Extra: toml
|
||||
Requires-Dist: tomli>=1.1.0; python_version < "3.11" and extra == "toml"
|
||||
Provides-Extra: baseline
|
||||
Requires-Dist: GitPython>=3.1.30; extra == "baseline"
|
||||
Provides-Extra: sarif
|
||||
Requires-Dist: sarif-om>=1.0.4; extra == "sarif"
|
||||
Requires-Dist: jschema-to-python>=1.2.3; extra == "sarif"
|
||||
Provides-Extra: test
|
||||
Requires-Dist: coverage>=4.5.4; extra == "test"
|
||||
Requires-Dist: fixtures>=3.0.0; extra == "test"
|
||||
Requires-Dist: flake8>=4.0.0; extra == "test"
|
||||
Requires-Dist: stestr>=2.5.0; extra == "test"
|
||||
Requires-Dist: testscenarios>=0.5.0; extra == "test"
|
||||
Requires-Dist: testtools>=2.3.0; extra == "test"
|
||||
Requires-Dist: beautifulsoup4>=4.8.0; extra == "test"
|
||||
Requires-Dist: pylint==1.9.4; extra == "test"
|
||||
Dynamic: author
|
||||
Dynamic: author-email
|
||||
Dynamic: description
|
||||
Dynamic: home-page
|
||||
Dynamic: license
|
||||
Dynamic: license-file
|
||||
Dynamic: project-url
|
||||
Dynamic: provides-extra
|
||||
Dynamic: requires-dist
|
||||
Dynamic: requires-python
|
||||
Dynamic: summary
|
||||
|
||||
.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/logo/logotype-sm.png
|
||||
:alt: Bandit
|
||||
|
||||
======
|
||||
|
||||
.. image:: https://github.com/PyCQA/bandit/actions/workflows/pythonpackage.yml/badge.svg?branch=main
|
||||
:target: https://github.com/PyCQA/bandit/actions?query=workflow%3A%22Build+and+Test+Bandit%22+branch%3Amain
|
||||
:alt: Build Status
|
||||
|
||||
.. image:: https://readthedocs.org/projects/bandit/badge/?version=latest
|
||||
:target: https://readthedocs.org/projects/bandit/
|
||||
:alt: Docs Status
|
||||
|
||||
.. image:: https://img.shields.io/pypi/v/bandit.svg
|
||||
:target: https://pypi.org/project/bandit/
|
||||
:alt: Latest Version
|
||||
|
||||
.. image:: https://img.shields.io/pypi/pyversions/bandit.svg
|
||||
:target: https://pypi.org/project/bandit/
|
||||
:alt: Python Versions
|
||||
|
||||
.. image:: https://img.shields.io/pypi/format/bandit.svg
|
||||
:target: https://pypi.org/project/bandit/
|
||||
:alt: Format
|
||||
|
||||
.. image:: https://img.shields.io/badge/license-Apache%202-blue.svg
|
||||
:target: https://github.com/PyCQA/bandit/blob/main/LICENSE
|
||||
:alt: License
|
||||
|
||||
.. image:: https://img.shields.io/discord/825463413634891776.svg
|
||||
:target: https://discord.gg/qYxpadCgkx
|
||||
:alt: Discord
|
||||
|
||||
A security linter from PyCQA
|
||||
|
||||
* Free software: Apache license
|
||||
* Documentation: https://bandit.readthedocs.io/en/latest/
|
||||
* Source: https://github.com/PyCQA/bandit
|
||||
* Bugs: https://github.com/PyCQA/bandit/issues
|
||||
* Contributing: https://github.com/PyCQA/bandit/blob/main/CONTRIBUTING.md
|
||||
|
||||
Overview
|
||||
--------
|
||||
|
||||
Bandit is a tool designed to find common security issues in Python code. To do
|
||||
this Bandit processes each file, builds an AST from it, and runs appropriate
|
||||
plugins against the AST nodes. Once Bandit has finished scanning all the files
|
||||
it generates a report.
|
||||
|
||||
Bandit was originally developed within the OpenStack Security Project and
|
||||
later rehomed to PyCQA.
|
||||
|
||||
.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/bandit-terminal.png
|
||||
:alt: Bandit Example Screen Shot
|
||||
|
||||
Show Your Style
|
||||
---------------
|
||||
|
||||
.. image:: https://img.shields.io/badge/security-bandit-yellow.svg
|
||||
:target: https://github.com/PyCQA/bandit
|
||||
:alt: Security Status
|
||||
|
||||
Use our badge in your project's README!
|
||||
|
||||
using Markdown::
|
||||
|
||||
[](https://github.com/PyCQA/bandit)
|
||||
|
||||
using RST::
|
||||
|
||||
.. image:: https://img.shields.io/badge/security-bandit-yellow.svg
|
||||
:target: https://github.com/PyCQA/bandit
|
||||
:alt: Security Status
|
||||
|
||||
References
|
||||
----------
|
||||
|
||||
Python AST module documentation: https://docs.python.org/3/library/ast.html
|
||||
|
||||
Green Tree Snakes - the missing Python AST docs:
|
||||
https://greentreesnakes.readthedocs.org/en/latest/
|
||||
|
||||
Documentation of the various types of AST nodes that Bandit currently covers
|
||||
or could be extended to cover:
|
||||
https://greentreesnakes.readthedocs.org/en/latest/nodes.html
|
||||
|
||||
Container Images
|
||||
----------------
|
||||
|
||||
Bandit is available as a container image, built within the bandit repository
|
||||
using GitHub Actions. The image is available on ghcr.io:
|
||||
|
||||
.. code-block:: console
|
||||
|
||||
docker pull ghcr.io/pycqa/bandit/bandit
|
||||
|
||||
The image is built for the following architectures:
|
||||
|
||||
* amd64
|
||||
* arm64
|
||||
* armv7
|
||||
* armv8
|
||||
|
||||
To pull a specific architecture, use the following format:
|
||||
|
||||
.. code-block:: console
|
||||
|
||||
docker pull --platform=<architecture> ghcr.io/pycqa/bandit/bandit:latest
|
||||
|
||||
Every image is signed with sigstore cosign and it is possible to verify the
|
||||
source of origin using the following cosign command:
|
||||
|
||||
.. code-block:: console
|
||||
|
||||
cosign verify ghcr.io/pycqa/bandit/bandit:latest \
|
||||
--certificate-identity https://github.com/pycqa/bandit/.github/workflows/build-publish-image.yml@refs/tags/<version> \
|
||||
--certificate-oidc-issuer https://token.actions.githubusercontent.com
|
||||
|
||||
Where `<version>` is the release version of Bandit.
|
||||
|
||||
Sponsors
|
||||
--------
|
||||
|
||||
The development of Bandit is made possible by the following sponsors:
|
||||
|
||||
.. list-table::
|
||||
:width: 100%
|
||||
:class: borderless
|
||||
|
||||
* - .. image:: https://avatars.githubusercontent.com/u/34240465?s=200&v=4
|
||||
:target: https://opensource.mercedes-benz.com/
|
||||
:alt: Mercedes-Benz
|
||||
:width: 88
|
||||
|
||||
- .. image:: https://github.githubassets.com/assets/tidelift-8cea37dea8fc.svg
|
||||
:target: https://tidelift.com/lifter/search/pypi/bandit
|
||||
:alt: Tidelift
|
||||
:width: 88
|
||||
|
||||
- .. image:: https://avatars.githubusercontent.com/u/110237746?s=200&v=4
|
||||
:target: https://stacklok.com/
|
||||
:alt: Stacklok
|
||||
:width: 88
|
||||
|
||||
If you also ❤️ Bandit, please consider sponsoring.
|
||||
|
||||
@@ -0,0 +1,151 @@
|
||||
../../../bin/bandit,sha256=yBYGS7B3xqN_9bHJM7ux_Qw-qHCKYUn86RCg67iTR9c,226
|
||||
../../../bin/bandit-baseline,sha256=9ZfYWP7HqpuoSLgDOEc3BLBPrKOqyjIviJSjHkVZRKo,230
|
||||
../../../bin/bandit-config-generator,sha256=eHL_LNgSMZdLZ5oDRNDT51QWjFbe2FCUvDyKIpqWi8Y,238
|
||||
../../../share/man/man1/bandit.1,sha256=KJ3m_ldOMgtAgMEJOtUtEVpkzY_l3cBlqU-J7Q0agoM,6545
|
||||
bandit-1.9.2.dist-info/INSTALLER,sha256=zuuue4knoyJ-UwPPXg8fezS7VCrXJQrAP7zeNuwvFQg,4
|
||||
bandit-1.9.2.dist-info/METADATA,sha256=_qNlufb8-I7N9f2xpkqsJHu7C1henHmrY5UC5AdXmJs,7101
|
||||
bandit-1.9.2.dist-info/RECORD,,
|
||||
bandit-1.9.2.dist-info/REQUESTED,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
||||
bandit-1.9.2.dist-info/WHEEL,sha256=SmOxYU7pzNKBqASvQJ7DjX3XGUF92lrGhMb3R6_iiqI,91
|
||||
bandit-1.9.2.dist-info/entry_points.txt,sha256=WoSLidZc14iE9GTbJR_2SkYGg03fNqaIhmgf2kHSXN8,4156
|
||||
bandit-1.9.2.dist-info/licenses/LICENSE,sha256=CeipvOyAZxBGUsFoaFqwkx54aPnIKEtm9a5u2uXxEws,10142
|
||||
bandit-1.9.2.dist-info/pbr.json,sha256=7xTM-0o_27NMhRTgoUeKqP7eYksacwC1XzciVz5jxcI,47
|
||||
bandit-1.9.2.dist-info/top_level.txt,sha256=SVJ-U-In_cpe2PQq5ZOlxjEnlAV5MfjvfFuGzg8wgdg,7
|
||||
bandit/__init__.py,sha256=yjou8RxyHpx6zHjYcBa4_CUffNYIdERGCPx6PirAo-8,683
|
||||
bandit/__main__.py,sha256=PtnKPE5k9V79ArPscEozE9ruwUIMuHlYv3yiCMJ5UBs,571
|
||||
bandit/__pycache__/__init__.cpython-312.pyc,,
|
||||
bandit/__pycache__/__main__.cpython-312.pyc,,
|
||||
bandit/blacklists/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
||||
bandit/blacklists/__pycache__/__init__.cpython-312.pyc,,
|
||||
bandit/blacklists/__pycache__/calls.cpython-312.pyc,,
|
||||
bandit/blacklists/__pycache__/imports.cpython-312.pyc,,
|
||||
bandit/blacklists/__pycache__/utils.cpython-312.pyc,,
|
||||
bandit/blacklists/calls.py,sha256=QCVOeBCZMrxLMo4ELUbuhCt2QorTcUe9vzqFDR0T1mU,29363
|
||||
bandit/blacklists/imports.py,sha256=3lCND02DoDE9EFHPeFhEegzP3YTZb4dk9RCUA-96Tek,17269
|
||||
bandit/blacklists/utils.py,sha256=OBm8dmmQsgp5_dJcm2-eAi69u5eXujeOYDg6zhMNeTM,420
|
||||
bandit/cli/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
||||
bandit/cli/__pycache__/__init__.cpython-312.pyc,,
|
||||
bandit/cli/__pycache__/baseline.cpython-312.pyc,,
|
||||
bandit/cli/__pycache__/config_generator.cpython-312.pyc,,
|
||||
bandit/cli/__pycache__/main.cpython-312.pyc,,
|
||||
bandit/cli/baseline.py,sha256=Z0VsMRmKyTxTyWLELtuKret9eiRkIqH804phSzzn_wU,7841
|
||||
bandit/cli/config_generator.py,sha256=umRDttgCxuyPG_7bOXCHgsEUi_xwaQbwgSA3tdGoUfk,6281
|
||||
bandit/cli/main.py,sha256=0ArpKpaYG-jQyOHRDcY2hnZVFbv945nQmE2ZOZsKrTc,20874
|
||||
bandit/core/__init__.py,sha256=NwxNqwUmUIJBQwnsOG58nvi6owEldiyGmkkig0a-4nw,558
|
||||
bandit/core/__pycache__/__init__.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/blacklisting.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/config.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/constants.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/context.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/docs_utils.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/extension_loader.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/issue.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/manager.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/meta_ast.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/metrics.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/node_visitor.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/test_properties.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/test_set.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/tester.cpython-312.pyc,,
|
||||
bandit/core/__pycache__/utils.cpython-312.pyc,,
|
||||
bandit/core/blacklisting.py,sha256=AcV2Xe_gFmqRFTezvtOxDUv2z6r4v3mcXhg63MHQ85c,2780
|
||||
bandit/core/config.py,sha256=6VCkWN3PFGIG9x4FFrNjBvhTffxRZ_KEnipNmlgzav8,9840
|
||||
bandit/core/constants.py,sha256=yaB2ks72eOzrnfN7xOr3zFWxsc8eCMnppnIBj-_Jmn0,1220
|
||||
bandit/core/context.py,sha256=27qPogcEZcHdTV2ByGnBpJso7Kr8bwObk5rnunGqrOs,10667
|
||||
bandit/core/docs_utils.py,sha256=iDWwx4XTnIcAyQhLp6DSyP9C1M2pkgA2Ktb686cyf_I,1779
|
||||
bandit/core/extension_loader.py,sha256=6w8qE64A8vYU6wP3ryVZfn7Yxy5SFpw_zEnB5ttWeyU,4039
|
||||
bandit/core/issue.py,sha256=BituIds2j2gbSMaMf9iM7N_yzcGo0-qQq38Pp-Ae7ko,7069
|
||||
bandit/core/manager.py,sha256=VheBgjhZ7AieM0Wnh2C2Z7JLvXA03k58tOtLj4FxiUA,17283
|
||||
bandit/core/meta_ast.py,sha256=rAUdLwsm4eTPN0oXvzyIOfVXsuKV93MLMJsUC86hTWc,1136
|
||||
bandit/core/metrics.py,sha256=wDjPmrujRszaqY0zI1W7tVTVYhnC-kHo8wCaf5vYKBA,3454
|
||||
bandit/core/node_visitor.py,sha256=HsSSE3KnKxLfS_57hK_VDgfCud6LvjA_xraZ58rMmdg,10830
|
||||
bandit/core/test_properties.py,sha256=_letTk7y9Sp5SyRaq2clLeNRjKCWnOxucglGtUMLE5Q,2106
|
||||
bandit/core/test_set.py,sha256=jweZ7eK1IGhodabF6DHO_DhBMMrHxFU03R5_z4sSrJc,4054
|
||||
bandit/core/tester.py,sha256=X83oF67sqLC23ox8VWGK81v0TzFNfrvAYYouNnQFlho,6511
|
||||
bandit/core/utils.py,sha256=U5Q88mi9A7yenKMPhQA8EJyaI6qYw18kRFOM4SdhHJw,12266
|
||||
bandit/formatters/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
||||
bandit/formatters/__pycache__/__init__.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/csv.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/custom.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/html.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/json.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/sarif.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/screen.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/text.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/utils.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/xml.cpython-312.pyc,,
|
||||
bandit/formatters/__pycache__/yaml.cpython-312.pyc,,
|
||||
bandit/formatters/csv.py,sha256=IiTLncVx3hnn7A7pJpJ5Y9vxibhxHIvZnGhezhYYKSg,2313
|
||||
bandit/formatters/custom.py,sha256=21GgrLiaStknoVD9GU-sWku4nK7hJI4O7-pgyHQacbw,5363
|
||||
bandit/formatters/html.py,sha256=VNHmmKAsZWV_S-ROd4DEXJd_Uy1ipOvbD50BzihubKU,8489
|
||||
bandit/formatters/json.py,sha256=8fA-v5lsLTdoB5UwCVqxhpgeYAZDY1tK7wsZjUAFLqg,4330
|
||||
bandit/formatters/sarif.py,sha256=jP5kd9Eut0BiPIJ7e8J38vp7BLLtJFaRfEGSwGQZ41I,10791
|
||||
bandit/formatters/screen.py,sha256=71cPOEqoDznO1aHbVt-zAjWLeeTMUwYGj5kt86UGdrM,6850
|
||||
bandit/formatters/text.py,sha256=Vhh_AUATxiQpLcm0xtZ91GSJ5QeES_rXMVy1kS1H_U4,5978
|
||||
bandit/formatters/utils.py,sha256=MXmcXC1fBeRbURQKqUtqhPMtAEMO6I6-MIwcdrI_UFA,390
|
||||
bandit/formatters/xml.py,sha256=pbsa66tYlGfybq6_N5gOhTgKnSQnvJFs39z8zFCwac4,2753
|
||||
bandit/formatters/yaml.py,sha256=lmJDFXQmxp7vdC7koqRWMb9IRSMXyXEFhH2zoNu8oHc,3463
|
||||
bandit/plugins/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
||||
bandit/plugins/__pycache__/__init__.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/app_debug.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/asserts.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/crypto_request_no_cert_validation.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/django_sql_injection.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/django_xss.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/exec.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/general_bad_file_permissions.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/general_bind_all_interfaces.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/general_hardcoded_password.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/general_hardcoded_tmp.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/hashlib_insecure_functions.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/huggingface_unsafe_download.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/injection_paramiko.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/injection_shell.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/injection_sql.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/injection_wildcard.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/insecure_ssl_tls.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/jinja2_templates.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/logging_config_insecure_listen.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/mako_templates.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/markupsafe_markup_xss.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/pytorch_load.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/request_without_timeout.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/snmp_security_check.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/ssh_no_host_key_verification.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/tarfile_unsafe_members.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/trojansource.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/try_except_continue.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/try_except_pass.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/weak_cryptographic_key.cpython-312.pyc,,
|
||||
bandit/plugins/__pycache__/yaml_load.cpython-312.pyc,,
|
||||
bandit/plugins/app_debug.py,sha256=0Zp-DTiLnuvF-jlZKhCEK-9YzRMcUc7JS6mxWV01hFc,2257
|
||||
bandit/plugins/asserts.py,sha256=iOP5WRjdpFc8j62pIkQ_cx-LYDW1aSv8qpfdU78AoXU,2305
|
||||
bandit/plugins/crypto_request_no_cert_validation.py,sha256=AyESgBZ7JtzieeJTnRXu0kknf7og1B5GI-6uA3kLbls,2660
|
||||
bandit/plugins/django_sql_injection.py,sha256=iYNAWU-j0DRgj5rDN7sboWvxcm2czm0i8849N6tzIdw,5203
|
||||
bandit/plugins/django_xss.py,sha256=HOUAk6w2lMF6RNsZsyP7i_1qa4iJGXg2Ek_Ni28joQ4,10302
|
||||
bandit/plugins/exec.py,sha256=5kosSmgI8Y2XM4Z_5hwIq7WRTmdpfDM5E7uXYTaGxgo,1357
|
||||
bandit/plugins/general_bad_file_permissions.py,sha256=8T59CP-aluBtXkQdyyQJljFiLvK4yVIy3fDSggw53Eg,3340
|
||||
bandit/plugins/general_bind_all_interfaces.py,sha256=Mn8YBkfF5Qwhx1QRMHB-5HNnzhR4neP0lI_6LyQr4Gg,1522
|
||||
bandit/plugins/general_hardcoded_password.py,sha256=UfSRKJAKxbAOq7Mxo9mGP9eCj0ixxwCztD80ctbrCoM,8282
|
||||
bandit/plugins/general_hardcoded_tmp.py,sha256=OjDZgboZF186RK133GQksRqAkneBP14LxnBn88KSjjs,2301
|
||||
bandit/plugins/hashlib_insecure_functions.py,sha256=-cYJKULazbzqwOcq-uAGk5EvDMNTHc9BCubr3l4UHJY,4330
|
||||
bandit/plugins/huggingface_unsafe_download.py,sha256=Up1y-dxOEPJpnhzCB6c0oiNWhbRNq5UlqocJyjdNa7c,5323
|
||||
bandit/plugins/injection_paramiko.py,sha256=bAbqH-4CHQY1ghQpjlck-Pl8DKq4G6jJoAQCY3PSzYw,2049
|
||||
bandit/plugins/injection_shell.py,sha256=PsNFFjg59usUSIFR-g5VPwcUJzQ_0KJLFq3Y64rfXYY,26851
|
||||
bandit/plugins/injection_sql.py,sha256=4AmbKs5DX_pdNykSMnHcvK_IdfVP_e_-whB1P24hSSw,4875
|
||||
bandit/plugins/injection_wildcard.py,sha256=GeHJchoDxULuaLeCxMyYuJrxVTC1vx8k6JSsXm5BDFM,5016
|
||||
bandit/plugins/insecure_ssl_tls.py,sha256=VrR9qyOyY7o1UTBw-Fw06GbE87SO4wD_j127erVfDLQ,10454
|
||||
bandit/plugins/jinja2_templates.py,sha256=5-0hPcJqm-THcZn44CSReq9_oy8Ym9QG_YN-vzv3hhg,5806
|
||||
bandit/plugins/logging_config_insecure_listen.py,sha256=UzDtLTiIwRnqpPjPIZbdtYb32BT5E5h2hhC2-m9kxGU,1944
|
||||
bandit/plugins/mako_templates.py,sha256=HBhxtofo1gGd8dKPxahJ1ELlv60NYrn0rcX4B-MYtpM,2549
|
||||
bandit/plugins/markupsafe_markup_xss.py,sha256=QTFwXe99MK26MtEEmn6tlNdy9ojQY0BMZNvKMZ3cAWg,3704
|
||||
bandit/plugins/pytorch_load.py,sha256=G8W6dPpAIPU6UyOV_IcKsXAPsVZkwo_m7XpV5R8aRr4,2650
|
||||
bandit/plugins/request_without_timeout.py,sha256=IJadPCwQVEAXZ3h3YscgvgDIzdrHM0_jozYiRN30kyE,3087
|
||||
bandit/plugins/snmp_security_check.py,sha256=tTdonRdKMKs5Rq4o4OWznW4_rjna2UhnStNLZTKG58I,3716
|
||||
bandit/plugins/ssh_no_host_key_verification.py,sha256=1Fqx5k5gtLvnWk4Gz7bQXwqx4TOxIzUGa-ouYBQGNsI,2732
|
||||
bandit/plugins/tarfile_unsafe_members.py,sha256=-VKsrS06IdH4NfbXTphi6d4AUtkjELJAuZIHfQyTKw8,3929
|
||||
bandit/plugins/trojansource.py,sha256=wdZMcMsbBumI6OC-q0k7mBIDolX3lruwWSIj2eBnyDU,2513
|
||||
bandit/plugins/try_except_continue.py,sha256=K-VrQS_YnifFwz5GC1LAUzGHTbbh9m-LHuDaJwgAS5o,3078
|
||||
bandit/plugins/try_except_pass.py,sha256=DwPiiziccoWtgE86aEmU9maKW1W8JuJxqOlnume1nis,2910
|
||||
bandit/plugins/weak_cryptographic_key.py,sha256=SGH3YM3LiBrcmuO0GjnQuZCVm42d2C68l1dGKtnwNb8,5544
|
||||
bandit/plugins/yaml_load.py,sha256=bOfCZBOcSXB3AAINJbuvcHkHebo-qyMyA4155Lgnx2g,2404
|
||||
@@ -0,0 +1,5 @@
|
||||
Wheel-Version: 1.0
|
||||
Generator: setuptools (79.0.1)
|
||||
Root-Is-Purelib: true
|
||||
Tag: py3-none-any
|
||||
|
||||
@@ -0,0 +1,63 @@
|
||||
[bandit.blacklists]
|
||||
calls = bandit.blacklists.calls:gen_blacklist
|
||||
imports = bandit.blacklists.imports:gen_blacklist
|
||||
|
||||
[bandit.formatters]
|
||||
csv = bandit.formatters.csv:report
|
||||
custom = bandit.formatters.custom:report
|
||||
html = bandit.formatters.html:report
|
||||
json = bandit.formatters.json:report
|
||||
sarif = bandit.formatters.sarif:report
|
||||
screen = bandit.formatters.screen:report
|
||||
txt = bandit.formatters.text:report
|
||||
xml = bandit.formatters.xml:report
|
||||
yaml = bandit.formatters.yaml:report
|
||||
|
||||
[bandit.plugins]
|
||||
any_other_function_with_shell_equals_true = bandit.plugins.injection_shell:any_other_function_with_shell_equals_true
|
||||
assert_used = bandit.plugins.asserts:assert_used
|
||||
django_extra_used = bandit.plugins.django_sql_injection:django_extra_used
|
||||
django_mark_safe = bandit.plugins.django_xss:django_mark_safe
|
||||
django_rawsql_used = bandit.plugins.django_sql_injection:django_rawsql_used
|
||||
exec_used = bandit.plugins.exec:exec_used
|
||||
flask_debug_true = bandit.plugins.app_debug:flask_debug_true
|
||||
hardcoded_bind_all_interfaces = bandit.plugins.general_bind_all_interfaces:hardcoded_bind_all_interfaces
|
||||
hardcoded_password_default = bandit.plugins.general_hardcoded_password:hardcoded_password_default
|
||||
hardcoded_password_funcarg = bandit.plugins.general_hardcoded_password:hardcoded_password_funcarg
|
||||
hardcoded_password_string = bandit.plugins.general_hardcoded_password:hardcoded_password_string
|
||||
hardcoded_sql_expressions = bandit.plugins.injection_sql:hardcoded_sql_expressions
|
||||
hardcoded_tmp_directory = bandit.plugins.general_hardcoded_tmp:hardcoded_tmp_directory
|
||||
hashlib_insecure_functions = bandit.plugins.hashlib_insecure_functions:hashlib
|
||||
huggingface_unsafe_download = bandit.plugins.huggingface_unsafe_download:huggingface_unsafe_download
|
||||
jinja2_autoescape_false = bandit.plugins.jinja2_templates:jinja2_autoescape_false
|
||||
linux_commands_wildcard_injection = bandit.plugins.injection_wildcard:linux_commands_wildcard_injection
|
||||
logging_config_insecure_listen = bandit.plugins.logging_config_insecure_listen:logging_config_insecure_listen
|
||||
markupsafe_markup_xss = bandit.plugins.markupsafe_markup_xss:markupsafe_markup_xss
|
||||
paramiko_calls = bandit.plugins.injection_paramiko:paramiko_calls
|
||||
pytorch_load = bandit.plugins.pytorch_load:pytorch_load
|
||||
request_with_no_cert_validation = bandit.plugins.crypto_request_no_cert_validation:request_with_no_cert_validation
|
||||
request_without_timeout = bandit.plugins.request_without_timeout:request_without_timeout
|
||||
set_bad_file_permissions = bandit.plugins.general_bad_file_permissions:set_bad_file_permissions
|
||||
snmp_insecure_version = bandit.plugins.snmp_security_check:snmp_insecure_version_check
|
||||
snmp_weak_cryptography = bandit.plugins.snmp_security_check:snmp_crypto_check
|
||||
ssh_no_host_key_verification = bandit.plugins.ssh_no_host_key_verification:ssh_no_host_key_verification
|
||||
ssl_with_bad_defaults = bandit.plugins.insecure_ssl_tls:ssl_with_bad_defaults
|
||||
ssl_with_bad_version = bandit.plugins.insecure_ssl_tls:ssl_with_bad_version
|
||||
ssl_with_no_version = bandit.plugins.insecure_ssl_tls:ssl_with_no_version
|
||||
start_process_with_a_shell = bandit.plugins.injection_shell:start_process_with_a_shell
|
||||
start_process_with_no_shell = bandit.plugins.injection_shell:start_process_with_no_shell
|
||||
start_process_with_partial_path = bandit.plugins.injection_shell:start_process_with_partial_path
|
||||
subprocess_popen_with_shell_equals_true = bandit.plugins.injection_shell:subprocess_popen_with_shell_equals_true
|
||||
subprocess_without_shell_equals_true = bandit.plugins.injection_shell:subprocess_without_shell_equals_true
|
||||
tarfile_unsafe_members = bandit.plugins.tarfile_unsafe_members:tarfile_unsafe_members
|
||||
trojansource = bandit.plugins.trojansource:trojansource
|
||||
try_except_continue = bandit.plugins.try_except_continue:try_except_continue
|
||||
try_except_pass = bandit.plugins.try_except_pass:try_except_pass
|
||||
use_of_mako_templates = bandit.plugins.mako_templates:use_of_mako_templates
|
||||
weak_cryptographic_key = bandit.plugins.weak_cryptographic_key:weak_cryptographic_key
|
||||
yaml_load = bandit.plugins.yaml_load:yaml_load
|
||||
|
||||
[console_scripts]
|
||||
bandit = bandit.cli.main:main
|
||||
bandit-baseline = bandit.cli.baseline:main
|
||||
bandit-config-generator = bandit.cli.config_generator:main
|
||||
@@ -0,0 +1,175 @@
|
||||
|
||||
Apache License
|
||||
Version 2.0, January 2004
|
||||
http://www.apache.org/licenses/
|
||||
|
||||
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
|
||||
|
||||
1. Definitions.
|
||||
|
||||
"License" shall mean the terms and conditions for use, reproduction,
|
||||
and distribution as defined by Sections 1 through 9 of this document.
|
||||
|
||||
"Licensor" shall mean the copyright owner or entity authorized by
|
||||
the copyright owner that is granting the License.
|
||||
|
||||
"Legal Entity" shall mean the union of the acting entity and all
|
||||
other entities that control, are controlled by, or are under common
|
||||
control with that entity. For the purposes of this definition,
|
||||
"control" means (i) the power, direct or indirect, to cause the
|
||||
direction or management of such entity, whether by contract or
|
||||
otherwise, or (ii) ownership of fifty percent (50%) or more of the
|
||||
outstanding shares, or (iii) beneficial ownership of such entity.
|
||||
|
||||
"You" (or "Your") shall mean an individual or Legal Entity
|
||||
exercising permissions granted by this License.
|
||||
|
||||
"Source" form shall mean the preferred form for making modifications,
|
||||
including but not limited to software source code, documentation
|
||||
source, and configuration files.
|
||||
|
||||
"Object" form shall mean any form resulting from mechanical
|
||||
transformation or translation of a Source form, including but
|
||||
not limited to compiled object code, generated documentation,
|
||||
and conversions to other media types.
|
||||
|
||||
"Work" shall mean the work of authorship, whether in Source or
|
||||
Object form, made available under the License, as indicated by a
|
||||
copyright notice that is included in or attached to the work
|
||||
(an example is provided in the Appendix below).
|
||||
|
||||
"Derivative Works" shall mean any work, whether in Source or Object
|
||||
form, that is based on (or derived from) the Work and for which the
|
||||
editorial revisions, annotations, elaborations, or other modifications
|
||||
represent, as a whole, an original work of authorship. For the purposes
|
||||
of this License, Derivative Works shall not include works that remain
|
||||
separable from, or merely link (or bind by name) to the interfaces of,
|
||||
the Work and Derivative Works thereof.
|
||||
|
||||
"Contribution" shall mean any work of authorship, including
|
||||
the original version of the Work and any modifications or additions
|
||||
to that Work or Derivative Works thereof, that is intentionally
|
||||
submitted to Licensor for inclusion in the Work by the copyright owner
|
||||
or by an individual or Legal Entity authorized to submit on behalf of
|
||||
the copyright owner. For the purposes of this definition, "submitted"
|
||||
means any form of electronic, verbal, or written communication sent
|
||||
to the Licensor or its representatives, including but not limited to
|
||||
communication on electronic mailing lists, source code control systems,
|
||||
and issue tracking systems that are managed by, or on behalf of, the
|
||||
Licensor for the purpose of discussing and improving the Work, but
|
||||
excluding communication that is conspicuously marked or otherwise
|
||||
designated in writing by the copyright owner as "Not a Contribution."
|
||||
|
||||
"Contributor" shall mean Licensor and any individual or Legal Entity
|
||||
on behalf of whom a Contribution has been received by Licensor and
|
||||
subsequently incorporated within the Work.
|
||||
|
||||
2. Grant of Copyright License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
copyright license to reproduce, prepare Derivative Works of,
|
||||
publicly display, publicly perform, sublicense, and distribute the
|
||||
Work and such Derivative Works in Source or Object form.
|
||||
|
||||
3. Grant of Patent License. Subject to the terms and conditions of
|
||||
this License, each Contributor hereby grants to You a perpetual,
|
||||
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
|
||||
(except as stated in this section) patent license to make, have made,
|
||||
use, offer to sell, sell, import, and otherwise transfer the Work,
|
||||
where such license applies only to those patent claims licensable
|
||||
by such Contributor that are necessarily infringed by their
|
||||
Contribution(s) alone or by combination of their Contribution(s)
|
||||
with the Work to which such Contribution(s) was submitted. If You
|
||||
institute patent litigation against any entity (including a
|
||||
cross-claim or counterclaim in a lawsuit) alleging that the Work
|
||||
or a Contribution incorporated within the Work constitutes direct
|
||||
or contributory patent infringement, then any patent licenses
|
||||
granted to You under this License for that Work shall terminate
|
||||
as of the date such litigation is filed.
|
||||
|
||||
4. Redistribution. You may reproduce and distribute copies of the
|
||||
Work or Derivative Works thereof in any medium, with or without
|
||||
modifications, and in Source or Object form, provided that You
|
||||
meet the following conditions:
|
||||
|
||||
(a) You must give any other recipients of the Work or
|
||||
Derivative Works a copy of this License; and
|
||||
|
||||
(b) You must cause any modified files to carry prominent notices
|
||||
stating that You changed the files; and
|
||||
|
||||
(c) You must retain, in the Source form of any Derivative Works
|
||||
that You distribute, all copyright, patent, trademark, and
|
||||
attribution notices from the Source form of the Work,
|
||||
excluding those notices that do not pertain to any part of
|
||||
the Derivative Works; and
|
||||
|
||||
(d) If the Work includes a "NOTICE" text file as part of its
|
||||
distribution, then any Derivative Works that You distribute must
|
||||
include a readable copy of the attribution notices contained
|
||||
within such NOTICE file, excluding those notices that do not
|
||||
pertain to any part of the Derivative Works, in at least one
|
||||
of the following places: within a NOTICE text file distributed
|
||||
as part of the Derivative Works; within the Source form or
|
||||
documentation, if provided along with the Derivative Works; or,
|
||||
within a display generated by the Derivative Works, if and
|
||||
wherever such third-party notices normally appear. The contents
|
||||
of the NOTICE file are for informational purposes only and
|
||||
do not modify the License. You may add Your own attribution
|
||||
notices within Derivative Works that You distribute, alongside
|
||||
or as an addendum to the NOTICE text from the Work, provided
|
||||
that such additional attribution notices cannot be construed
|
||||
as modifying the License.
|
||||
|
||||
You may add Your own copyright statement to Your modifications and
|
||||
may provide additional or different license terms and conditions
|
||||
for use, reproduction, or distribution of Your modifications, or
|
||||
for any such Derivative Works as a whole, provided Your use,
|
||||
reproduction, and distribution of the Work otherwise complies with
|
||||
the conditions stated in this License.
|
||||
|
||||
5. Submission of Contributions. Unless You explicitly state otherwise,
|
||||
any Contribution intentionally submitted for inclusion in the Work
|
||||
by You to the Licensor shall be under the terms and conditions of
|
||||
this License, without any additional terms or conditions.
|
||||
Notwithstanding the above, nothing herein shall supersede or modify
|
||||
the terms of any separate license agreement you may have executed
|
||||
with Licensor regarding such Contributions.
|
||||
|
||||
6. Trademarks. This License does not grant permission to use the trade
|
||||
names, trademarks, service marks, or product names of the Licensor,
|
||||
except as required for reasonable and customary use in describing the
|
||||
origin of the Work and reproducing the content of the NOTICE file.
|
||||
|
||||
7. Disclaimer of Warranty. Unless required by applicable law or
|
||||
agreed to in writing, Licensor provides the Work (and each
|
||||
Contributor provides its Contributions) on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
||||
implied, including, without limitation, any warranties or conditions
|
||||
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. You are solely responsible for determining the
|
||||
appropriateness of using or redistributing the Work and assume any
|
||||
risks associated with Your exercise of permissions under this License.
|
||||
|
||||
8. Limitation of Liability. In no event and under no legal theory,
|
||||
whether in tort (including negligence), contract, or otherwise,
|
||||
unless required by applicable law (such as deliberate and grossly
|
||||
negligent acts) or agreed to in writing, shall any Contributor be
|
||||
liable to You for damages, including any direct, indirect, special,
|
||||
incidental, or consequential damages of any character arising as a
|
||||
result of this License or out of the use or inability to use the
|
||||
Work (including but not limited to damages for loss of goodwill,
|
||||
work stoppage, computer failure or malfunction, or any and all
|
||||
other commercial damages or losses), even if such Contributor
|
||||
has been advised of the possibility of such damages.
|
||||
|
||||
9. Accepting Warranty or Additional Liability. While redistributing
|
||||
the Work or Derivative Works thereof, You may choose to offer,
|
||||
and charge a fee for, acceptance of support, warranty, indemnity,
|
||||
or other liability obligations and/or rights consistent with this
|
||||
License. However, in accepting such obligations, You may act only
|
||||
on Your own behalf and on Your sole responsibility, not on behalf
|
||||
of any other Contributor, and only if You agree to indemnify,
|
||||
defend, and hold each Contributor harmless for any liability
|
||||
incurred by, or claims asserted against, such Contributor by reason
|
||||
of your accepting any such warranty or additional liability.
|
||||
@@ -0,0 +1 @@
|
||||
{"git_version": "ea0d187", "is_release": false}
|
||||
@@ -0,0 +1 @@
|
||||
bandit
|
||||
Reference in New Issue
Block a user