@codacy/tools-bandit-1 0.5.0 → 0.6.1

package/dist/index.js

@@ -48,6 +48,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of Assert Statements",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -56,6 +57,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of exec",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -64,6 +66,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Setting Permissive File Permissions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -72,6 +75,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid binding to all network interfaces",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -80,6 +84,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Hardcoded Password Strings",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -88,6 +93,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Hardcoded Password Function Arguments",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -96,6 +102,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Hardcoded Password Argument Defaults",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -104,6 +111,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Hardcoded Temporary Directory Usage",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -112,6 +120,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Password Based Config Options Not Marked Secret",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -120,6 +129,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid pass in except block",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -128,6 +138,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect use of rootwrap running as root",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -136,6 +147,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid continue in except block",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -144,6 +156,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Enforce timeout parameter in requests calls",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -152,6 +165,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Running Flask App with Debug Mode Enabled",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -160,6 +174,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Using tarfile.extractall Without Safe Member Validation",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -168,6 +183,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Unsafe Use of Pickle for Deserialization",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -176,6 +192,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Deserialization with the marshal Module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -184,6 +201,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of Insecure Hash Functions (MD2, MD4, MD5, SHA1)",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -192,6 +210,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of Insecure Cipher or Cipher Mode",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -200,6 +219,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of Insecure Ciphers and Cipher Modes",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -208,6 +228,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of Insecure and Deprecated Function mktemp",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -216,6 +237,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of eval function",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -224,6 +246,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of mark_safe()",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -232,6 +255,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of HTTPSConnection on Older Python Versions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -240,6 +264,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Audit urllib urlopen for permitted schemes",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -248,6 +273,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Standard Pseudo-Random Generators for Security Purposes",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -256,6 +282,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Using Telnet-related Functions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -264,6 +291,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Unsafe XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -272,6 +300,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -280,6 +309,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using xml.sax.expatreader.create_parser for Parsing Untrusted XML",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -288,6 +318,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid parsing untrusted XML data with vulnerable XML methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -296,6 +327,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using xml.sax Methods to Parse Untrusted XML",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -304,6 +336,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Unsafe XML Parsing with xml.dom.minidom",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -312,6 +345,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Parsing Untrusted XML with xml.dom.pulldom Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -320,6 +354,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable lxml.etree XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -328,6 +363,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Using FTP-Related Functions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -336,6 +372,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid using input() in Python 2",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -344,6 +381,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Unverified SSL Context",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -352,6 +390,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of Insecure Hash Functions in hashlib",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -360,6 +399,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid use of os.tempnam() and os.tmpnam()",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -368,6 +408,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing Telnetlib Module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -376,6 +417,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing ftplib Module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -384,6 +426,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Consider Security Implications of Importing pickle and Related Modules",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -392,6 +435,7 @@ var patterns_default = [
     severityLevel: "Info",
     title: "Consider security implications of importing subprocess module",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -400,6 +444,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable xml.etree Imports for Parsing Untrusted XML",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -408,6 +453,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -416,6 +462,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Methods",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -424,6 +471,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid importing xml.dom.minidom for untrusted XML parsing",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -432,6 +480,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid importing xml.dom.pulldom for untrusted XML parsing",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -440,6 +489,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Using Vulnerable XML Parsing Libraries (lxml)",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -448,6 +498,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing xmlrpclib",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -456,6 +507,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid importing CGI handlers vulnerable to httpoxy",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -464,6 +516,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing PyCrypto Library",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -472,6 +525,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Importing PyCryptodome Modules",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -480,6 +534,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid disabling SSL certificate validation in requests",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -488,6 +543,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Use of SSL/TLS with Bad Versions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -496,6 +552,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect SSL Usage with Insecure Default Protocol Versions",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -504,6 +561,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect SSL/TLS Usage with No Version Specified",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -512,6 +570,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Use of Weak Cryptographic Keys",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -520,6 +579,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Unsafe Use of yaml.load",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -528,6 +588,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid Disabling SSH Host Key Verification",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -536,6 +597,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid using insecure SNMP versions",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -544,6 +606,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Weak SNMP Cryptography",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -552,6 +615,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Shell Injection Vulnerabilities in Paramiko exec_command",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -560,6 +624,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid subprocess.Popen with shell=True",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -568,6 +633,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Check subprocess usage without shell=True",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -576,6 +642,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect function calls with shell=True parameter",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -584,6 +651,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid starting a process with a shell",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -592,6 +660,7 @@ var patterns_default = [
     severityLevel: "Info",
     title: "Detect Starting a Process Without a Shell",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -600,6 +669,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid starting a process with a partial executable path",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -608,6 +678,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Hardcoded SQL Expressions to Prevent SQL Injection",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -616,6 +687,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Detect Wildcard Injection in Linux Command Emulation",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -624,6 +696,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Potential SQL Injection in Django extra() Function",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -632,6 +705,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Use of RawSQL Function in Django",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -640,6 +714,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid insecure use of logging.config.listen",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -648,6 +723,7 @@ var patterns_default = [
     severityLevel: "High",
     title: "Avoid disabling autoescaping in Jinja2 templates",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -656,6 +732,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Detect Use of Mako Templates",
     enabled: true,
+    languages: ["Python"],
     parameters: []
   },
   {
@@ -664,6 +741,7 @@ var patterns_default = [
     severityLevel: "Warning",
     title: "Avoid Potential XSS with django mark_safe Function",
     enabled: false,
+    languages: ["Python"],
     parameters: []
   }
 ];
@@ -942,9 +1020,11 @@ var adapter = {
       if (!stdout.trim()) {
         return (0, import_tooling.buildResult)(TOOL_ID, startedAt, /* @__PURE__ */ new Date(), issues, errors, ctx.targetFiles.length);
       }
+      const jsonStart = stdout.indexOf("{");
+      const jsonPayload = jsonStart === -1 ? stdout : stdout.slice(jsonStart);
       let banditOutput;
       try {
-        banditOutput = JSON.parse(stdout);
+        banditOutput = JSON.parse(jsonPayload);
       } catch (err) {
         errors.push({
           toolId: TOOL_ID,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-bandit-1",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "Bandit adapter — CLI-mode Python security linter",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.5.0"
+    "@codacy/tooling": "0.6.1"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",