intel / intel/xml-cli

[FEATURE] Create Github Action Pipeline for Bandit Scan

Open
#17 0 comments 0 reactions 0 assignees View on GitHub
easy enhancement good first issue help wanted question
Dominant language
Python
Stars
32
Forks
15
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe. **
Run [Bandit tool](https://github.com/PyCQA/bandit) to find common security issues over repository

**Describe the solution you'd like**
1. Create GitHub action workflow to run bandit scan
2. Action Trigger
- weekly periodic scan
- Scan for every pull request
3. Documentation: https://bandit.readthedocs.io/en/latest/

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the repository's GitHub Actions configuration and the Bandit documentation linked in the issue. Add a workflow that runs Bandit weekly and for every pull request, with the scan covering the repository; done means both triggers execute the scan successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, python
Domain
ci-cd, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.