Specify bandit arguments using yaml file

Bandit not respecting values provided in .bandit file because of a known issue PyCQA/bandit#488
uktrade · Sep 6, 2023 · d4f6697 · d4f6697
1 parent 8cfc621
commit d4f6697
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/.bandit b/.bandit
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -89,7 +89,7 @@ jobs:
       - run:
           name: Bandit
           command: |
-            pipenv run bandit -r .
+            pipenv run bandit -c bandit.yaml -r .
 
   check_background_tasks_up:
     machine:

diff --git a/bandit.yaml b/bandit.yaml
@@ -0,0 +1,2 @@
+exclude_dirs: ['mail/tests', '.venv', '.git', 'tests']
+skips: ['B101']
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		exclude_dirs: ['mail/tests', '.venv', '.git', 'tests']
		skips: ['B101']