PyCQA/bandit

Health v2 · maintenance only

Adoption not part of the score

8285 stars · 838 forks observed · 2026-09-26

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Bandit is a security-oriented static analysis tool that finds common security issues in Python code. It parses each file into an AST, runs plugin checks against the AST nodes, and generates a report of findings.

Use cases

• scan python code for security vulnerabilities
• find hardcoded passwords and insecure function calls in python
• add security linting to a ci pipeline
• detect use of insecure libraries like pickle or md5 in python code
• run static security analysis before code review
• audit python project for common security mistakes

When to choose

• you want automated, AST-based detection of common Python security anti-patterns
• you need a lightweight security scanner that integrates into CI/CD
• you want a plugin-extensible linter focused on security rather than style

When to avoid

• you need dynamic analysis or runtime vulnerability detection
• you need dependency vulnerability scanning (use pip-audit or safety instead)
• you need general-purpose style or type linting (use flake8, ruff, or mypy)

Facets

cli-tool · maturity active

linter security vulnerability-scanning ci-cd security developer-tools python cli cross-platform static-analysis security-scanner ast-based code-quality sast static-code-analysis python docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="PyCQA/bandit")