Added Bandit starter workflow and properties file (#1859)

* Added Bandit starter workflow and properties file. Python security scanner, Action by a Hubber, wraps free tool * Set icon name to one in the icons folder * Switched to Bandit's own SVG icon * Added workflow disclaimer * Fixed author name Co-authored-by: Sampark Sharma <phantsure@github.com>
2023-01-12 10:57:17 +00:00
parent 9f245d9aba
commit a3c3cf245c
3 changed files with 148 additions and 0 deletions
@@ -0,0 +1,53 @@
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+# Bandit is a security linter designed to find common security issues in Python code.
+# This action will run Bandit on your codebase.
+# The results of the scan will be found under the Security tab of your repository.
+
+# https://github.com/marketplace/actions/bandit-scan is ISC licensed, by abirismyname
+# https://pypi.org/project/bandit/ is Apache v2.0 licensed, by PyCQA
+
+name: Bandit
+on:
+  push:
+    branches: [ $default-branch, $protected-branches ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ $default-branch ]
+  schedule:
+    - cron: $cron-weekly
+
+jobs:
+  bandit:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Bandit Scan
+        uses: shundor/python-bandit-scan@9cc5aa4a006482b8a7f91134412df6772dbda22c
+        
+        with: # optional arguments
+          # exit with 0, even with results found
+          exit_zero: true # optional, default is DEFAULT
+          # Github token of the repository (automatically created by Github)
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information.
+          # File or directory to run bandit on
+          # path: # optional, default is .
+          # Report only issues of a given severity level or higher. Can be LOW, MEDIUM or HIGH. Default is UNDEFINED (everything)
+          # level: # optional, default is UNDEFINED
+          # Report only issues of a given confidence level or higher. Can be LOW, MEDIUM or HIGH. Default is UNDEFINED (everything)
+          # confidence: # optional, default is UNDEFINED
+          # comma-separated list of paths (glob patterns supported) to exclude from scan (note that these are in addition to the excluded paths provided in the config file) (default: .svn,CVS,.bzr,.hg,.git,__pycache__,.tox,.eggs,*.egg)
+          # excluded_paths: # optional, default is DEFAULT
+          # comma-separated list of test IDs to skip
+          # skips: # optional, default is DEFAULT
+          # path to a .bandit file that supplies command line arguments
+          # ini_path: # optional, default is DEFAULT
+
@@ -0,0 +1,8 @@
+{
+    "name": "Bandit Scan",
+    "creator": "abirismyname",
+    "enterprise": false,
+    "description": "Bandit is free software designed to find common security issues in Python code, maintained by PyCQA",
+    "iconName": "bandit",
+    "categories": ["Code Scanning", "Python"]
+}
@@ -0,0 +1,87 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
+<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"
+	 viewBox="0 0 337.4 344.8" enable-background="new 0 0 337.4 344.8" xml:space="preserve">
+<linearGradient id="XMLID_45_" gradientUnits="userSpaceOnUse" x1="305.8379" y1="220.568" x2="93.2951" y2="6.369">
+	<stop  offset="0" style="stop-color:#F7CB18"/>
+	<stop  offset="1" style="stop-color:#FFDE77"/>
+</linearGradient>
+<circle id="XMLID_187_" fill="url(#XMLID_45_)" cx="174.1" cy="87.8" r="68.2"/>
+<path id="XMLID_183_" fill="#FFFFFF" d="M208.4,73.7c0,10.8-8.8,19.6-19.6,19.6s-19.6-8.8-19.6-19.6c0-10.8,8.8-19.6,19.6-19.6
+	S208.4,62.9,208.4,73.7z"/>
+<path id="XMLID_178_" fill="#FFFFFF" d="M158.4,97c5.1,0,9.2,4.1,9.2,9.2s-4.1,9.2-9.2,9.2c-5.1,0-9.2-4.1-9.2-9.2
+	S153.3,97,158.4,97z"/>
+<linearGradient id="XMLID_51_" gradientUnits="userSpaceOnUse" x1="281.5646" y1="244.6536" x2="69.0218" y2="30.4546">
+	<stop  offset="0" style="stop-color:#F7CB18"/>
+	<stop  offset="1" style="stop-color:#FFDE77"/>
+</linearGradient>
+<path id="XMLID_176_" fill="url(#XMLID_51_)" d="M174.3,144.3l-0.1,0l-0.1,0c-34.2-0.3-65.4-14.9-88.2-38.2
+	c12,48.7,36.9,106,88.4,147c51.3-40.9,76.2-98,88.3-146.6C238.8,130.6,207.6,144,174.3,144.3z"/>
+<path id="XMLID_168_" opacity="9.000000e-002" fill="#191919" d="M100.3,148c0,0,9,30.5,73,38.7c0.9,0.1,1.1,1.3,0.2,1.6
+	C160.4,193.3,115.5,211.3,100.3,148z"/>
+<path id="XMLID_166_" opacity="9.000000e-002" fill="#191919" d="M127.1,188.9c0,0,2.1,10.2,31.1,13.7c0.8,0.1,1,1.2,0.2,1.5
+	c-7.7,3.3-31.7,11.2-46.3-12.8l-3.8-15.3c0,0-0.1-1.9,8,0S127.1,188.9,127.1,188.9z"/>
+<path id="XMLID_164_" opacity="9.000000e-002" fill="#191919" d="M252.3,145.5c0,0-15.6,24.6-50,24.3c-0.9,0-1.3,1.3-0.4,1.7
+	c9.3,5,37.9,16.3,56.7-22.2L252.3,145.5z"/>
+<path id="XMLID_18_" opacity="9.000000e-002" fill="#191919" d="M174.3,150.1l-0.1,0l-0.1,0c-32.8-0.3-62.8-16.6-84.7-38.3
+	c0.5,1.8,1,9.1,1.5,11c21.4,21.6,51,35.2,83.4,35.4c31.4-0.3,61-12.7,83.2-35c0.5-1.8,1.5-17.1,1.5-12.6
+	C236.2,132.9,206.2,149.8,174.3,150.1z"/>
+<path id="XMLID_158_" fill="#191919" d="M267.5,93.4C267.5,93.4,267.5,93.4,267.5,93.4c-0.4-0.4-0.7-0.6-1-0.9
+	c-1.5-1.3-3.3-2.4-5.4-3.1c-0.1,0-0.1,0-0.1-0.1c-2.4-0.8-5.3-1.1-8.6-0.7c0-0.3,0-0.6,0-0.9c0-43.1-35.1-78.2-78.2-78.2
+	c0,0,0,0-0.1,0c0,0,0,0-0.1,0c-43.1,0-78.2,35.1-78.2,78.2c0,0.3,0,0.6,0,0.9c-3.3-0.4-6.1-0.2-8.6,0.7c-2.2,0.7-4,1.8-5.6,3.2
+	c-0.3,0.3-0.6,0.5-0.9,0.8c0,0,0,0-0.1,0.1c-3.7,3.6-4.9,9-3.8,14c0.3,1.4,0.6,2.9,1,4.4c11.3,49.1,37.1,110.8,96.3,152.4v-0.1
+	c59.1-41.6,84.9-103.3,96.2-152.3c0.3-1.5,0.7-2.9,1-4.4C272.5,102.4,271.2,97,267.5,93.4z M174.1,23.3L174.1,23.3
+	C174.1,23.3,174.1,23.3,174.1,23.3c0.1,0,0.1,0,0.1,0v0c35.6,0,64.5,28.9,64.5,64.5c0,11.9-3.2,23-8.9,32.6c-0.1,0,0.1,0,0,0
+	c-0.1,0.2,0.1-0.1,0,0c-16.4,10.5-35.7,16.6-55.6,16.7c-20.5-0.2-39.6-6.3-55.7-16.7c-5.6-9.6-8.9-20.7-8.9-32.6
+	C109.6,52.2,138.5,23.3,174.1,23.3z M247.1,144.8c-0.1,0.1-0.2,0.2-0.3,0.3c-7.2,7.3-21.7,18-44.5,17.8c-0.9,0-1.3,1.3-0.4,1.7
+	c3.3,1.8,9,4.3,15.8,5.2c6.3,0.8,13.6,0.2,20.8-3.9c-13.7,29.4-34,58.6-64.2,82c-18.6-14.4-33.4-31-45.3-48.5
+	c12,4.6,24.5,0.4,29.6-1.9c0.7-0.3,0.5-1.4-0.2-1.5c-18.9-2.2-26.4-7.3-29.3-10.6c17.4,7.9,36.7,0.3,44.6-2.7
+	c0.8-0.3,0.6-1.5-0.2-1.6c-53.9-6.9-68.8-29.6-72.1-36.7c-3.5-9.7-6.5-19.4-8.8-28.6c4.6,4.6,9.7,8.8,15,12.6
+	c12.4,8.8,26.6,15.3,41.9,18.8c8,1.8,16.3,2.9,24.9,2.9l0.1,0v0c8.5-0.1,16.8-1.1,24.8-2.9c15.3-3.5,29.5-10,41.9-18.8
+	c5.3-3.8,10.4-8,15-12.6c0,0.2-0.1,0.4-0.1,0.5c0.1-0.1,0.1-0.1,0.2-0.2C253.6,125.5,250.7,135.1,247.1,144.8z"/>
+<linearGradient id="XMLID_52_" gradientUnits="userSpaceOnUse" x1="68.4216" y1="163.8214" x2="105.3826" y2="84.7659">
+	<stop  offset="0" style="stop-color:#F7CB18"/>
+	<stop  offset="1" style="stop-color:#FFDE77"/>
+</linearGradient>
+<path id="XMLID_9_" fill="url(#XMLID_52_)" stroke="#000000" stroke-width="3" stroke-miterlimit="10" d="M79,133.3
+	c-0.3-0.5-2.6-5.1-0.7-11.4c1.9-6.4,7.5-12,16.4-16.8l3.3-1.8l1.9,3.2c0.7,1.2,6.3,12.2-15.1,28l-3.6,2.7L79,133.3z"/>
+<g id="XMLID_12_">
+	<path id="XMLID_82_" fill="#191919" d="M76.9,134.4c-0.5-1-3-6.2-0.9-13.3c2.1-7.1,8.1-13.2,17.6-18.2l5.4-2.8l3.1,5.2
+		c1.3,2.3,6.9,14.5-15.8,31.2l-5.9,4.3L76.9,134.4z M95.9,107.3c-8.3,4.4-13.5,9.6-15.2,15.3c-1.7,5.5,0.4,9.4,0.5,9.5l0.8,1.5
+		l1.4-1c20-14.8,14.7-24.4,14.5-24.8l-0.7-1.2L95.9,107.3z"/>
+	<path id="XMLID_77_" fill="#191919" d="M98.4,102.1l2.4,4c1.2,2.1,6.2,13.3-15.4,29.2l-4.5,3.3l-2.7-4.9c-0.3-0.5-2.8-5.5-0.8-12.1
+		c2-6.7,7.7-12.5,16.9-17.3L98.4,102.1 M81.5,135.9l2.8-2c20.8-15.3,15.5-25.6,14.9-26.8l-1.5-2.5l-2.5,1.3
+		c-8.7,4.6-14.1,10-15.9,16.2c-1.8,5.9,0.4,10.2,0.6,10.7L81.5,135.9 M99.6,98.1l-6.6,3.5c-9.9,5.2-16.1,11.7-18.3,19.1
+		c-2.3,7.7,0.4,13.4,1,14.4l4.3,8l7.3-5.4c23.7-17.5,17.6-30.7,16.2-33.2L99.6,98.1L99.6,98.1z M82.5,131.4c0,0-6.5-12,14.1-22.8
+		C96.6,108.6,101.7,117.3,82.5,131.4L82.5,131.4z"/>
+</g>
+<g id="XMLID_6_">
+	<linearGradient id="XMLID_53_" gradientUnits="userSpaceOnUse" x1="52.075" y1="153.1959" x2="89.0359" y2="74.1405">
+		<stop  offset="0" style="stop-color:#F7CB18"/>
+		<stop  offset="1" style="stop-color:#FFDE77"/>
+	</linearGradient>
+	<path id="XMLID_5_" fill="url(#XMLID_53_)" stroke="#000000" stroke-width="3" stroke-miterlimit="10" d="M84.7,109.3
+		c-7.9,0-17.6-2.8-28.7-8.4l-4-2l2.6-3.7c0.2-0.3,5.8-8.2,18-8.2c8.1,0,17.3,3.5,27.1,10.4l3.1,2.2l-2,3.2
+		C100.3,103.4,96.2,109.3,84.7,109.3z"/>
+	<path id="XMLID_2_" fill="#191919" stroke="#191919" stroke-width="3" stroke-miterlimit="10" d="M72.5,90.9
+		c6.1,0,14.3,2.3,24.9,9.7c0,0-3,4.8-12.7,4.8c-6.1,0-14.7-1.9-26.9-8C57.7,97.4,62.2,90.9,72.5,90.9 M72.5,83L72.5,83
+		c-14,0-20.6,8.9-21.3,9.9l-5.1,7.5l8.1,4c11.7,5.8,21.9,8.8,30.4,8.8c13.3,0,18.4-7,19.3-8.4l4-6.3l-6.1-4.3
+		C91.4,86.8,81.5,83,72.5,83L72.5,83z"/>
+</g>
+<path id="XMLID_179_" fill="#191919" d="M174.1,45c23.6,0,42.7,19.1,42.7,42.7c0,23.6-19.1,42.7-42.7,42.7s-42.7-19.1-42.7-42.7
+	C131.3,64.2,150.5,45,174.1,45z M188.8,54.1c-10.8,0-19.6,8.8-19.6,19.6c0,10.8,8.8,19.6,19.6,19.6s19.6-8.8,19.6-19.6
+	C208.4,62.9,199.6,54.1,188.8,54.1z M167.6,106.2c0-5.1-4.1-9.2-9.2-9.2c-5.1,0-9.2,4.1-9.2,9.2s4.1,9.2,9.2,9.2
+	C163.5,115.4,167.6,111.2,167.6,106.2z"/>
+<path id="XMLID_27_" fill="#191919" d="M76.8,320.9v-46.6h18.3c4.2,0,7.4,1,9.5,3.1c2.1,2.1,3.2,4.9,3.2,8.5c0,2.7-0.6,4.9-1.7,6.7
+	c-1.3,2-3.2,3.3-5.6,3.8v0.1c2.9,0.3,5.1,1.5,6.6,3.7c1.3,1.9,2,4.2,2,6.9c0,9.2-4.7,13.8-14,13.8H76.8z M88.9,283v9.5h2.9
+	c1.2,0,2.1-0.5,2.8-1.4c0.7-0.9,1-2,1-3.3c0-1.3-0.3-2.5-1-3.4c-0.7-0.9-1.6-1.4-2.8-1.4H88.9z M88.9,300.8v11.4h3.4
+	c1.2,0,2.2-0.5,3-1.5c0.8-1,1.3-2.4,1.3-4.2c0-1.7-0.4-3.1-1.3-4.2c-0.8-1-1.8-1.4-3-1.4H88.9z"/>
+<path id="XMLID_31_" fill="#191919" d="M109.3,320.9l11.4-46.6H136l11.4,46.6h-12.9l-1.2-8.2h-9.7l-1.2,8.2H109.3z M131.7,303.6
+	l-3.3-19.8h-0.1l-3.3,19.8H131.7z"/>
+<path id="XMLID_34_" fill="#191919" d="M149.4,320.9v-46.6H163l7.9,28.7v-28.7h11.4v46.6h-13.4l-8.1-28.8v28.8H149.4z"/>
+<path id="XMLID_36_" fill="#191919" d="M188,320.9v-46.6h17.6c6.3,0,10.5,2.4,12.7,7.1c1.4,3.1,2.1,8.6,2.1,16.3
+	c0,7.7-0.7,13.1-2.1,16.3c-2.1,4.7-6.4,7.1-12.7,7.1H188z M200.2,283v29.1h2.4c2,0,3.4-0.9,4.3-2.7c0.6-1.3,1-3.3,1-5.9
+	c0,4.4,0,2.4,0-5.9s0-10.3,0-5.9c0-2.6-0.4-4.6-1-5.9c-0.9-1.8-2.3-2.7-4.3-2.7H200.2z"/>
+<path id="XMLID_39_" fill="#191919" d="M225.1,320.9v-46.6h12.1v46.6H225.1z"/>
+<path id="XMLID_41_" fill="#191919" d="M248.6,320.9v-36.3h-9.1v-10.3h30.4v10.3h-9.1v36.3H248.6z"/>
+</svg>