Skip to content

Draft: Replace local bandit.yml with sast-rules bandit.yml

Craig Smith requested to merge import_bandit_rules_from_sast_rules into main

What does this MR do?

The bandit rules are defined both in semgrep and sast-rules. The most up to date version of these rules is that defined in sast-rules. This MR removes the need to manually update the rules in semgrep with those in sast-rules by copying them from a defined tag when the project is built.

Making this change will result in a number of changes to the bandit ruleset.

6 rules have been renamed - !219 (comment 1325146880)

3 rules have been updated !219 (comment 1332353102):

What are the relevant issue numbers?

gitlab-org/gitlab#390908 (closed)

Does this MR meet the acceptance criteria?

Edited by Craig Smith

Merge request reports