Bandit

Bandit is a security linter for Python codebases. Bandit flags problems like hard-coded passwords, injection vulnerabilities, and the use of insecure libraries.

Bandit is a linter for Python.

You can enable the Bandit linter with:

trunk check enable bandit

bandit example output

Auto Enabling

Bandit will be auto-enabled if any Python files are present.

Settings

Bandit supports the following config files:

• .bandit

You can move these files to .trunk/configs and trunk check will still find them. See Moving Linters for more info.

Links

• Bandit site

• Bandit Trunk Code Quality integration source

• Trunk Code Quality's open source plugins repo