The `baseline` CLI doesn't allow specifying the base commit
Open
Nobody has claimed this yet.
enhancement
- Dominant language
- Python
- Stars
- 8.3k
- Forks
- 835
- Avg merge
- 5d 3h
- Merged PRs (30d)
- 1
Description
The bandit-baseline command currently only supports checking against the first parent commit, this doesn't allow testing an entire branch / pull request in a CI build.
Solution: a new argument that allows specifying the base commit could be added.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start in bandit/cli/baseline.py at the first-parent commit lookup linked in the issue. Trace how bandit-baseline selects its comparison commit and how CLI arguments are parsed. Done means a base commit can be specified so an entire branch or pull request can be checked in CI, while existing behavior remains available.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cli, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100