Repository navigation

ci(security): fail the Bandit gate when it analysed nothing and scan examples, scripts and tools - #587

Merged

yeongseon merged 9 commits into

mainfrom

ci/bandit-fails-on-empty-scan

Oct 24, 2026

Merged

ci(security): fail the Bandit gate when it analysed nothing and scan examples, scripts and tools#587
yeongseon merged 9 commits into
mainfrom
ci/bandit-fails-on-empty-scan

Commits on Oct 24, 2026
- ci(security): add a guard that fails on an empty or partial Bandit report
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  80cdf22
- ci(security): scan examples, scripts and tools and run the guard in make security
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  7b99fbd
- ci(security): upload the Bandit reports from the bandit job
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  c030177
- docs(security): document the Bandit scope, guard and suppression convention
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  de77db0
- ci(security): document a quiet inline suppression form that Bandit honours
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  cf810eb
- ci(security): annotate the reviewed subprocess calls in check_wheel_schemas
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  3336611
- ci(security): annotate the reviewed subprocess calls in check_pr_format
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  57afe4e
- ci(security): scan scripts and tools with every Bandit test and no skip list
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  28e74d5
- docs(security): describe the single Bandit scope and the inline-only suppressions
  
  yeongseon
  and
  sisyphus-dev-ai
  committed
  07a6b62