Bandit
lastmod 2026-11-10created 2026-04-222 edits
Bandit is a static analysis tool that finds common security vulnerabilities in Python code. It parses the source into an AST and then reports, with a severity level, code that triggers predefined checks such as use of eval, hardcoded passwords, unsafe deserialization, subprocess calls with shell=True, and weak hash algorithms. It is maintained by PyCQA and used by adding it to CI or a pre-commit hook.
Bandit is a tool designed to find common security issues in Python code.