core/tests/bandit.yaml

# https://bandit.readthedocs.io/en/latest/config.html

tests:
  - B108
  - B306
  - B307
  - B313
  - B314
  - B315
  - B316
  - B317
  - B318
  - B319
  - B320
  - B325
  - B602
  - B604
Add bandit, use to catch known vulnerable XML parsing (#28341) * Add bandit to pre-commit and CI, use to catch known vulnerable XML parsing * Use defusedxml instead of direct xml.etree to parse XML * Move config to tests/bandit.yaml 2019-11-18 08:10:15 +00:00			`# https://bandit.readthedocs.io/en/latest/config.html`

			`tests:`
Enable some more bandit checks (#30857) * Enable B108 (hardcoded tmp dir), address findings * Enable B602 (subprocess popen with shell), address findings * Enable B604 (start process with shell), address findings * Enable B306 (mktemp), B307 (eval), and B325 (tempnam), no issues to address 2020-01-20 16:44:55 +00:00			`- B108`
			`- B306`
			`- B307`
Add bandit, use to catch known vulnerable XML parsing (#28341) * Add bandit to pre-commit and CI, use to catch known vulnerable XML parsing * Use defusedxml instead of direct xml.etree to parse XML * Move config to tests/bandit.yaml 2019-11-18 08:10:15 +00:00			`- B313`
			`- B314`
			`- B315`
			`- B316`
			`- B317`
			`- B318`
			`- B319`
			`- B320`
Enable some more bandit checks (#30857) * Enable B108 (hardcoded tmp dir), address findings * Enable B602 (subprocess popen with shell), address findings * Enable B604 (start process with shell), address findings * Enable B306 (mktemp), B307 (eval), and B325 (tempnam), no issues to address 2020-01-20 16:44:55 +00:00			`- B325`
			`- B602`
			`- B604`