python-sast

To find Python security vulnerabilities, this Skill runs Bandit recursively on your project to detect injection, deserialization, unsafe exec/eval, weak crypto, and hardcoded credentials. It generates structured JSON output for automated parsing and analysis across diverse codebases and CI environments.

Bandit static analysis detects common Python security issues including injection, deserialization, unsafe exec/eval, weak crypto, and hardcoded credentials. It scans your repository and produces JSON-formatted findings that identify these vulnerability classes automatically.

Yes, Bandit static analysis applies to Python repositories containing pyproject.toml, setup.py, requirements.txt, or any .py files. It scans your codebase regardless of which specific project configuration file is present.

Yes, you need Bandit installed to perform Python static analysis on your repository. This Skill requires Bandit to run recursively on your project and parse its JSON output for vulnerability detection across your codebase.

To parse Bandit JSON output for automated vulnerability analysis, this Skill runs bandit -f json on your Python project and collects the structured findings. The JSON format enables automated parsing of detected security issues across CI environments.

The best way to integrate Python security scanning into CI environments is using Bandit to generate structured JSON reports. This Skill runs Bandit recursively on your project, producing automated JSON output for parsing security findings across diverse codebases and CI workflows.