Commits on Jan 20, 2024

1. Use .gitignore as part of the excluded file list …

   When using Bandit to scan projects based on Git source control,
   it would be benefitual to ignore files based on the patterns
   in the .gitignore file.
   
   Today, Bandit has some default excludes that get overridden if
   a user passes in other excludes. This is a bit confusing to the
   end user. But it also serves a purpose similar to .gitignore in
   that the paths excluded by default are typically included in a
   .gitignore.
   
   Note, it will only check for .gitignore files in top-level directories
   specified on the Bandit command line as targets. It does not recursive
   look for .gitignore files. This is done because recursive searching
   for .gitignore files would be complex to add to Bandit existing
   file discovery.
   
   This change adds a new Apache 2 licensed dependency of ignorelib.
   
   Fixes PyCQA#826
   
   Signed-off-by: Eric Brown <eric_wade_brown@yahoo.com>

   

   ericwb committed Jan 20, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for 442a692
   • Browse repository at this point

   Copy the full SHA

   442a692 View commit details

   Browse the repository at this point in the history