bandit package

Subpackages

• bandit.blacklists package
  • Submodules
  • bandit.blacklists.calls module
    • Blacklist various Python calls known to be dangerous
      • B301: pickle
      • B302: marshal
      • B303: md5
      • B304 - B305: ciphers and modes
      • B306: mktemp_q
      • B307: eval
      • B308: mark_safe
      • B309: httpsconnection
      • B310: urllib_urlopen
      • B311: random
      • B312: telnetlib
      • B313 - B320: XML
      • B321: ftplib
      • B322: input
      • B323: unverified_context
  • bandit.blacklists.imports module
    • Blacklist various Python imports known to be dangerous
      • B401: import_telnetlib
      • B402: import_ftplib
      • B403: import_pickle
      • B404: import_subprocess
      • B405: import_xml_etree
      • B406: import_xml_sax
      • B407: import_xml_expat
      • B408: import_xml_minidom
      • B409: import_xml_pulldom
      • B410: import_lxml
      • B411: import_xmlrpclib
      • B412: import_httpoxy
      • B413: import_pycrypto
  • bandit.blacklists.utils module
  • Module contents
• bandit.cli package
  • Submodules
  • bandit.cli.baseline module
  • bandit.cli.config_generator module
  • bandit.cli.main module
  • Module contents
• bandit.core package
  • Submodules
  • bandit.core.blacklisting module
  • bandit.core.config module
  • bandit.core.constants module
  • bandit.core.context module
  • bandit.core.docs_utils module
  • bandit.core.extension_loader module
  • bandit.core.issue module
  • bandit.core.manager module
  • bandit.core.meta_ast module
  • bandit.core.metrics module
  • bandit.core.node_visitor module
  • bandit.core.test_properties module
  • bandit.core.test_set module
  • bandit.core.tester module
  • bandit.core.utils module
  • Module contents
• bandit.formatters package
  • Submodules
  • bandit.formatters.csv module
    • CSV Formatter
  • bandit.formatters.custom module
    • Custom Formatter
  • bandit.formatters.html module
    • HTML formatter
  • bandit.formatters.json module
    • JSON formatter
  • bandit.formatters.screen module
    • Screen formatter
  • bandit.formatters.text module
    • Text Formatter
  • bandit.formatters.utils module
  • bandit.formatters.xml module
    • XML Formatter
  • bandit.formatters.yaml module
    • YAML Formatter
  • Module contents
• bandit.plugins package
  • Submodules
  • bandit.plugins.app_debug module
    • B201: Test for use of flask app with debug set to true
  • bandit.plugins.asserts module
    • B101: Test for use of assert
  • bandit.plugins.crypto_request_no_cert_validation module
    • B501: Test for missing certificate validation
  • bandit.plugins.exec module
    • B102: Test for the use of exec
  • bandit.plugins.exec_as_root module
    • B111: Test for the use of rootwrap running as root
  • bandit.plugins.general_bad_file_permissions module
    • B103: Test for setting permissive file permissions
  • bandit.plugins.general_bind_all_interfaces module
    • B104: Test for binding to all interfaces
  • bandit.plugins.general_hardcoded_password module
  • bandit.plugins.general_hardcoded_tmp module
    • B108: Test for insecure usage of tmp file/directory
  • bandit.plugins.hashlib_new_insecure_functions module
    • B324: Test for use of insecure md4 and md5 hash functions in hashlib.new()
  • bandit.plugins.injection_paramiko module
    • B601: Test for shell injection within Paramiko
  • bandit.plugins.injection_shell module
  • bandit.plugins.injection_sql module
    • B608: Test for SQL injection
  • bandit.plugins.injection_wildcard module
    • B609: Test for use of wildcard injection
  • bandit.plugins.insecure_ssl_tls module
  • bandit.plugins.jinja2_templates module
    • B701: Test for not auto escaping in jinja2
  • bandit.plugins.mako_templates module
    • B702: Test for use of mako templates
  • bandit.plugins.secret_config_option module
    • B109: Test for a password based config option not marked secret
  • bandit.plugins.try_except_continue module
    • B112: Test for a continue in the except block
  • bandit.plugins.try_except_pass module
    • B110: Test for a pass in the except block
  • bandit.plugins.weak_cryptographic_key module
    • B505: Test for weak cryptographic key use
  • bandit.plugins.yaml_load module
    • B506: Test for use of yaml load
  • Module contents

Module contents