[FEATURE] Create Github Action Pipeline for Bandit Scan
未关闭
easy
enhancement
good first issue
help wanted
question
- 主要语言
- Python
- 星标
- 32
- 派生
- 15
- PR 合并指标
- 30 天内没有已合并 PR
描述
**Is your feature request related to a problem? Please describe. **
Run [Bandit tool](https://github.com/PyCQA/bandit) to find common security issues over repository
**Describe the solution you'd like**
1. Create GitHub action workflow to run bandit scan
2. Action Trigger
- weekly periodic scan
- Scan for every pull request
3. Documentation: https://bandit.readthedocs.io/en/latest/
贡献指南
调研方向
Start by reviewing the repository's GitHub Actions configuration and the Bandit documentation linked in the issue. Add a workflow that runs Bandit weekly and for every pull request, with the scan covering the repository; done means both triggers execute the scan successfully.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- github-actions, python
- 领域
- ci-cd, security
- Issue 类型
- 功能
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 活跃度
- 停滞
- 描述清晰度
- 基本清楚
- 新手友好度
- 50/100