Skip to content

Add baseline security scanning (bandit, pip-audit, gitleaks) #8

Description

@williamzujkowski

repo_security_plan reports no security tooling configured. Recommended critical baseline for this Python project:

  • bandit (SAST): pip install bandit && bandit -r .
  • pip-audit (SCA): pip install pip-audit && pip-audit
  • gitleaks (secrets): gitleaks/gitleaks-action@v2

No secrets or vulnerable deps were found on manual inspection (pydantic is the only runtime dependency), so this is preventative. Add these as a CI job (can be folded into the lint/test workflow).

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions