openstack-archive/bandit
View on GitHub ↗ ★ 1,158 archived
Python AST-based static analyzer from OpenStack Security Group
4 mentions on Hacker News by 3 people: 1 story, 3 comments · first 2016-02-09 · latest 2017-02-01
20082026
-
▲ 2
Python AST-based static analyzer/security linterstory by daenney · 2017-02-01 · 0 comments
-
…you're interested in reviewing Python code for potential security issues, here's a related project: https://github.com/openstack/bandit (I'm one of the devs) It will actually pick up a number of security issues listed in the post. It's…
comment by viraptor · 2016-09-08 · in A bite of Python -
…sensiolab/security-checker, etc). Scan your code with tools reporting security issues (like https://github.com/openstack/bandit for python, or https://github.com/HewlettPackard/gas for go). Based on OWASP make sure bad things are banned in…
comment by viraptor · 2016-08-22 · in Ask HN: So you release your new site. How do you know it's not wide open? -
…You very nearly always want NameError to propagate, lest you conceal a glaring design error. [1] https://github.com/openstack/bandit [2] https://github.com/openstack/bandit/blob/430dfceca9cebd7ebe4...
comment by wyldfire · 2016-02-09 · in Finding secrets in Python source code