.bandit•774 B
# Bandit configuration for static application security testing (SAST)
[bandit]
# Test IDs to skip (comma-separated)
# B101: Test for use of assert
# B601: Test for shell injection within Paramiko
skips = ["B101"]
# Test IDs to include (comma-separated)
# If specified, only these tests will be run
# tests = ["B201", "B301"]
# Paths to exclude from scanning
exclude_dirs = [
"./tests",
"./lib",
"./.venv",
"./build",
"./dist"
]
# Confidence levels: LOW, MEDIUM, HIGH
confidence = "MEDIUM"
# Severity levels: LOW, MEDIUM, HIGH
severity = "MEDIUM"
# Output format: csv, custom, html, json, screen, txt, xml, yaml
format = "json"
# Output file (optional)
output = "bandit-report.json"
# Include line numbers in output
include_line_numbers = true