[FEATURE] Create Github Action Pipeline for Bandit Scan
- Dominant language
- Python
- Stars
- 32
- Forks
- 15
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe. **
Run [Bandit tool](https://github.com/PyCQA/bandit) to find common security issues over repository
**Describe the solution you'd like**
1. Create GitHub action workflow to run bandit scan
2. Action Trigger
- weekly periodic scan
- Scan for every pull request
3. Documentation: https://bandit.readthedocs.io/en/latest/
Contributor guide
Research direction
Start by reviewing the repository's GitHub Actions configuration and the Bandit documentation linked in the issue. Add a workflow that runs Bandit weekly and for every pull request, with the scan covering the repository; done means both triggers execute the scan successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, python
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 50/100