@codacy/tools-bandit-1 0.4.0 → 0.6.0

package/dist/index.js

@@ -48,6 +48,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of Assert Statements",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -56,6 +57,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of exec",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -64,6 +66,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Setting Permissive File Permissions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -72,6 +75,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid binding to all network interfaces",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -80,6 +84,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Hardcoded Password Strings",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -88,6 +93,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Hardcoded Password Function Arguments",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -96,6 +102,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Hardcoded Password Argument Defaults",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -104,6 +111,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Hardcoded Temporary Directory Usage",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -112,6 +120,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Password Based Config Options Not Marked Secret",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -120,6 +129,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid pass in except block",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -128,6 +138,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect use of rootwrap running as root",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -136,6 +147,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid continue in except block",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -144,6 +156,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Enforce timeout parameter in requests calls",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -152,6 +165,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Running Flask App with Debug Mode Enabled",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -160,6 +174,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Using tarfile.extractall Without Safe Member Validation",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -168,6 +183,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Unsafe Use of Pickle for Deserialization",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -176,6 +192,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Deserialization with the marshal Module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -184,6 +201,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of Insecure Hash Functions (MD2, MD4, MD5, SHA1)",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -192,6 +210,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of Insecure Cipher or Cipher Mode",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -200,6 +219,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of Insecure Ciphers and Cipher Modes",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -208,6 +228,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of Insecure and Deprecated Function mktemp",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -216,6 +237,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of eval function",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -224,6 +246,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of mark_safe()",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -232,6 +255,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of HTTPSConnection on Older Python Versions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -240,6 +264,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Audit urllib urlopen for permitted schemes",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -248,6 +273,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Standard Pseudo-Random Generators for Security Purposes",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -256,6 +282,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Using Telnet-related Functions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -264,6 +291,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Unsafe XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -272,6 +300,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -280,6 +309,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using xml.sax.expatreader.create_parser for Parsing Untrusted XML",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -288,6 +318,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid parsing untrusted XML data with vulnerable XML methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -296,6 +327,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using xml.sax Methods to Parse Untrusted XML",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -304,6 +336,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Unsafe XML Parsing with xml.dom.minidom",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -312,6 +345,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Parsing Untrusted XML with xml.dom.pulldom Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -320,6 +354,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable lxml.etree XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -328,6 +363,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Using FTP-Related Functions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -336,6 +372,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid using input() in Python 2",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -344,6 +381,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Unverified SSL Context",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -352,6 +390,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of Insecure Hash Functions in hashlib",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -360,6 +399,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of os.tempnam() and os.tmpnam()",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -368,6 +408,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing Telnetlib Module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -376,6 +417,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing ftplib Module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -384,6 +426,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Consider Security Implications of Importing pickle and Related Modules",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -392,6 +435,7 @@ var patterns_default = [
     severityLevel: "Info",
     title: "Consider security implications of importing subprocess module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -400,6 +444,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable xml.etree Imports for Parsing Untrusted XML",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -408,6 +453,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -416,6 +462,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -424,6 +471,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid importing xml.dom.minidom for untrusted XML parsing",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -432,6 +480,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid importing xml.dom.pulldom for untrusted XML parsing",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -440,6 +489,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Libraries (lxml)",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -448,6 +498,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing xmlrpclib",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -456,6 +507,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid importing CGI handlers vulnerable to httpoxy",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -464,6 +516,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing PyCrypto Library",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -472,6 +525,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing PyCryptodome Modules",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -480,6 +534,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid disabling SSL certificate validation in requests",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -488,6 +543,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of SSL/TLS with Bad Versions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -496,6 +552,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect SSL Usage with Insecure Default Protocol Versions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -504,6 +561,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect SSL/TLS Usage with No Version Specified",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -512,6 +570,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Use of Weak Cryptographic Keys",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -520,6 +579,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Unsafe Use of yaml.load",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -528,6 +588,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Disabling SSH Host Key Verification",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -536,6 +597,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid using insecure SNMP versions",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -544,6 +606,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Weak SNMP Cryptography",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -552,6 +615,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Shell Injection Vulnerabilities in Paramiko exec_command",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -560,6 +624,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid subprocess.Popen with shell=True",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -568,6 +633,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Check subprocess usage without shell=True",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -576,6 +642,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect function calls with shell=True parameter",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -584,6 +651,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid starting a process with a shell",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -592,6 +660,7 @@ var patterns_default = [
     severityLevel: "Info",
     title: "Detect Starting a Process Without a Shell",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -600,6 +669,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid starting a process with a partial executable path",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -608,6 +678,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Hardcoded SQL Expressions to Prevent SQL Injection",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -616,6 +687,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Wildcard Injection in Linux Command Emulation",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -624,6 +696,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Potential SQL Injection in Django extra() Function",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -632,6 +705,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of RawSQL Function in Django",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -640,6 +714,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid insecure use of logging.config.listen",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -648,6 +723,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid disabling autoescaping in Jinja2 templates",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -656,6 +732,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Use of Mako Templates",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -664,10 +741,23 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Potential XSS with django mark_safe Function",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   }
 ];
 
+// src/metadata.ts
+var descriptor = {
+  id: "Bandit",
+  displayName: "Bandit",
+  preferredVersion: "1.8.3",
+  languages: ["Python"],
+  filePatterns: ["**/*.py"],
+  supportedOS: ["linux", "darwin"],
+  supportedArch: ["x64", "arm64"],
+  supportedRunners: ["local", "container"]
+};
+
 // src/adapter.ts
 var TOOL_ID = "Bandit";
 var ADAPTER_ID = "bandit-1";
@@ -695,37 +785,6 @@ function mapConfidence(confidence) {
       return 1;
   }
 }
-function getLineContent(lines, lineNumber) {
-  return lines[lineNumber - 1] ?? "";
-}
-async function readFileLines(filePath) {
-  try {
-    const content = await import_promises.default.readFile(filePath, "utf-8");
-    return content.split("\n");
-  } catch {
-    return [];
-  }
-}
-function buildResult(startedAt, completedAt, issues, errors, filesAnalyzed) {
-  const durationMs = completedAt.getTime() - startedAt.getTime();
-  return {
-    metadata: {
-      startedAt: startedAt.toISOString(),
-      completedAt: completedAt.toISOString(),
-      durationMs
-    },
-    issues,
-    errors,
-    summary: {
-      toolId: TOOL_ID,
-      status: errors.some((e) => e.level === "error") ? "partial" : "success",
-      issueCount: issues.length,
-      errorCount: errors.length,
-      durationMs,
-      filesAnalyzed
-    }
-  };
-}
 var CONFIG_FILE_CANDIDATES = [".bandit", "bandit.yml", "pyproject.toml"];
 async function resolveBinaryPath(ctx) {
   const venvDir = (0, import_tooling.getVenvDir)(ctx.globalDir, ADAPTER_ID);
@@ -745,16 +804,9 @@ function buildMessage(result) {
   return base;
 }
 var adapter = {
-  id: TOOL_ID,
-  displayName: "Bandit",
-  preferredVersion: "1.8.3",
+  ...descriptor,
   compatibleVersions: ">=1.7.0",
   website: "https://bandit.readthedocs.io/",
-  languages: ["Python"],
-  filePatterns: ["**/*.py"],
-  supportedOS: ["linux", "darwin"],
-  supportedArch: ["x64", "arm64"],
-  supportedRunners: ["local", "container"],
   prerequisites: [
     {
       name: "Python",
@@ -935,7 +987,7 @@ var adapter = {
     const issues = [];
     const errors = [];
     if (ctx.targetFiles.length === 0) {
-      return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
+      return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, 0);
     }
     const binary = await resolveBinaryPath(ctx);
     const absoluteFiles = ctx.targetFiles.map((f) => import_path.default.resolve(ctx.repositoryRoot, f));
@@ -948,11 +1000,6 @@ var adapter = {
       } else {
         args.push("-c", configPath);
       }
-    } else if (codacyConfig.patterns.length === 0) {
-      ctx.logger.info("Skipping analysis: no local config and no patterns enabled", {
-        toolId: TOOL_ID
-      });
-      return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
     }
     args.push(...absoluteFiles);
     try {
@@ -968,10 +1015,10 @@ var adapter = {
           message: `bandit exited with code ${exitCode}${stderr ? `: ${stderr.trim()}` : ""}`,
           level: "error"
         });
-        return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
       if (!stdout.trim()) {
-        return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
       let banditOutput;
       try {
@@ -984,7 +1031,7 @@ var adapter = {
           message: `Failed to parse bandit JSON output: ${err instanceof Error ? err.message : String(err)}`,
           level: "error"
         });
-        return buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+        return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
       if (banditOutput.errors && banditOutput.errors.length > 0) {
         for (const banditError of banditOutput.errors) {
@@ -1006,7 +1053,7 @@ var adapter = {
       }
       for (const [filePath, fileResults] of resultsByFile) {
         const absolutePath = import_path.default.isAbsolute(filePath) ? filePath : import_path.default.resolve(ctx.repositoryRoot, filePath);
-        const lines = await readFileLines(absolutePath);
+        const lines = await (0, import_tooling.readFileLines)(absolutePath);
         const relPath = import_path.default.relative(ctx.repositoryRoot, absolutePath);
         for (const result2 of fileResults) {
           const patternId = (0, import_tooling.buildPatternId)(TOOL_ID, result2.test_id);
@@ -1026,7 +1073,7 @@ var adapter = {
             endColumn: result2.end_col_offset ? result2.end_col_offset + 1 : void 0,
             // 0-based → 1-based
             message: buildMessage(result2),
-            lineContent: getLineContent(lines, result2.line_number),
+            lineContent: (0, import_tooling.getLineContent)(lines, result2.line_number),
             multilineContent: (0, import_tooling.getMultilineContent)(lines, result2.line_number, endLine),
             category: meta.category,
             severity: meta.severity,
@@ -1054,7 +1101,14 @@ var adapter = {
         level: "error"
       });
     }
-    const result = buildResult(startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
+    const result = (0, import_tooling.buildResult)(
+      TOOL_ID,
+      startedAt,
+      /* @__PURE__ */ new Date(),
+      issues,
+      errors,
+      ctx.targetFiles.length
+    );
     ctx.logger.info("Analysis complete", {
       toolId: TOOL_ID,
       issueCount: result.summary.issueCount,

package/dist/metadata.d.ts

@@ -0,0 +1,13 @@
+import { AdapterDescriptor } from '@codacy/tooling';
+
+/**
+ * Lightweight adapter descriptor for lazy loading.
+ *
+ * This module contains only plain-data metadata fields and has zero heavy
+ * imports (no patterns.json, no runtime utilities). The CLI imports this
+ * at startup for adapter registration without loading the full adapter module.
+ */
+
+declare const descriptor: AdapterDescriptor;
+
+export { descriptor };

package/dist/metadata.js

@@ -0,0 +1,39 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/metadata.ts
+var metadata_exports = {};
+__export(metadata_exports, {
+  descriptor: () => descriptor
+});
+module.exports = __toCommonJS(metadata_exports);
+var descriptor = {
+  id: "Bandit",
+  displayName: "Bandit",
+  preferredVersion: "1.8.3",
+  languages: ["Python"],
+  filePatterns: ["**/*.py"],
+  supportedOS: ["linux", "darwin"],
+  supportedArch: ["x64", "arm64"],
+  supportedRunners: ["local", "container"]
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  descriptor
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-bandit-1",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Bandit adapter — CLI-mode Python security linter",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.4.0"
+    "@codacy/tooling": "0.6.0"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",
@@ -21,8 +21,18 @@
   "engines": {
     "node": ">=20.0.0"
   },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./metadata": {
+      "types": "./dist/metadata.d.ts",
+      "default": "./dist/metadata.js"
+    }
+  },
   "scripts": {
-    "build": "tsup src/index.ts --format cjs --dts --clean",
+    "build": "tsup src/index.ts src/metadata.ts --format cjs --dts --clean",
     "test": "vitest run",
     "lint": "eslint src/",
     "clean": "rm -rf dist",