intel / intel/xml-cli

[FEATURE] Create Github Action Pipeline for Bandit Scan

未关闭
#17 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
easy enhancement good first issue help wanted question
主要语言
Python
星标
32
派生
15
PR 合并指标
30 天内没有已合并 PR

描述

**Is your feature request related to a problem? Please describe. **
Run [Bandit tool](https://github.com/PyCQA/bandit) to find common security issues over repository

**Describe the solution you'd like**
1. Create GitHub action workflow to run bandit scan
2. Action Trigger
- weekly periodic scan
- Scan for every pull request
3. Documentation: https://bandit.readthedocs.io/en/latest/

贡献指南

打开贡献指南

调研方向

Start by reviewing the repository's GitHub Actions configuration and the Bandit documentation linked in the issue. Add a workflow that runs Bandit weekly and for every pull request, with the scan covering the repository; done means both triggers execute the scan successfully.

由索引模型根据 Issue 内容生成。

评估

技术栈
github-actions, python
领域
ci-cd, security
Issue 类型
功能
难度
2/5
预计耗时
1-3 小时
活跃度
停滞
描述清晰度
基本清楚
新手友好度
50/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。