bandit
Safeguard articles tagged "bandit" — guides, analysis, and best practices for software supply chain and application security.
8 articles
Python linting for security hygiene: what flake8, pylint, and bandit actually catch
Bandit maps findings to CWE IDs like CWE-502 and CWE-78, but flake8 and pylint never look for a vulnerability at all — the three tools solve different problems.
The Python code review security checklist: eval, pickle, and shell=True
Bandit ships named checks for eval, pickle, and shell=True — B307, B301, B602 — yet these three smells still slip past manual review into production Python.
The three dimensions of Python static analysis, and where each one blinds itself
AST scanners, taint trackers, and type checkers each solve a different problem — and each has a documented blind spot that lets real bugs through untouched.
Choosing a Python Tool for Security: Scanning and Hardening Python Code
The right Python tool depends on what you are trying to catch: bugs in your own code, vulnerable dependencies, or leaked secrets. Here is how the categories fit together.
Python Code Analysis: Tools and Techniques for Secure Code
How static and dynamic Python code analysis catches security bugs before they ship, from Bandit and Semgrep to dependency scanning and taint tracking.
How to Check Python Code for Security Issues: A Practical Guide
A working method to check Python code for security defects, from static analysis of your own source to scanning the third-party packages you pull in.
Python Security Tools: The Ones Worth Running in Your Pipeline
A practitioner's tour of the Python security tools worth running: pip-audit for dependencies, Bandit for code, and detect-secrets, with CI examples.
Bandit for Python Security Linting: Getting Real Value From Static Analysis
Bandit scans Python code for security issues. Here is how to configure it so it catches real bugs without burying your team in false positives.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.