PyCQA / PyCQA/bandit

Official Dockerhub image

Open
#697 4 comments 1 reaction 1 assignee View on GitHub

@lukehinds is already working on this.

Since Mar 27, 2021.

enhancement
Dominant language
Python
Stars
8.3k
Forks
835
Avg merge
5d 3h
Merged PRs (30d)
1

Description

Is your feature request related to a problem? Please describe.

For CI pipelines it can be convenient to run a linting/checking tool from a Docker image. For example, Pyup provides their safety tool as a Docker image that you can run in a CI pipeline with:

cat requirements.txt | docker run -i --rm pyupio/safety safety check --stdin

This is useful so that instead of ensuring that safety is installed on a CI worker, you just pull the image and run.

It would be great to have a similar image for Bandit. There's a handful of ones I see in Dockerhub that have been created by random people and haven't been updated in some time, so it'd be great to have an official supported image that's kept up to date.

Describe the solution you'd like

A Docker image in Dockerhub that contains Bandit, tagged with the version that is installed in the image (latest always being the most recently released version of Bandit)

Describe alternatives you've considered

Currently I build my own image and install bandit into it, but it'd be nice to not have to maintain that and have an official image that can be used by the community at large.

Additional context

N/A

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.