• bandit:

Description

The documentation defines the "targets" variable to enter the path, but the entrypoint.sh script uses $INPUT_PATH on line 7. The documentation should either be updated to change the variable name to path, or the script changed to use the variable $INPUT_TARGETS.

Also, in the script, the $INPUT variables are enclosed in double quotes. This means that you can't specify multiple options or multiple paths, because it will end up like this (example with 2 options and 2 paths):

bandit "--recursive -lll" "path1/ path2/"

rather than like this:

bandit --recursive -lll path1/ path2/

What I Did

To have it work, I had to use the following config:

    steps:
      - name: Checkout
        uses: actions/checkout@master
      - name: Bandit
        uses: tj-actions/bandit@main
        with:
          bandit_version: "1.7.0"
          path: "."
          options: "-rlll"

... whereas, according to the documentation, this config should have worked, but it does not for the reasons mentioned in the description section:

    steps:
      - name: Checkout
        uses: actions/checkout@master
      - name: Bandit
        uses: tj-actions/bandit@main
        with:
          bandit_version: "1.7.0"
          targets: "."
          options: "--recursive -lll"

Description

I'll like a sample test repo that can be used to simulate an actual bandit report.

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: Cannot find preset's package (github>whitesource/merge-confidence:beta)

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update docker/build-push-action action to v6

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository