[CI] Add pre-commit hook bandit
to find Python security issues
#1634
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
https://github.com/PyCQA/bandit
https://bandit.readthedocs.io/en/latest/start.html#version-control-integration
https://bandit.readthedocs.io/en/latest/config.html
This PR is skipping four bandit tests.
https://bandit.readthedocs.io/en/latest/plugins/index.html#complete-test-plugin-listing
Did you read the Contributor Guide?
Is this PR related to a JIRA ticket?
What changes were proposed in this PR?
Added another check/test to our pre-commit framework.
Currently skipping 4 bandit checks and we can address these issues if needed in follow up PRs.
None of the 4 skipped checks were reported as high security.
B608 has been skipped it was reported as a possible medium
https://bandit.readthedocs.io/en/latest/plugins/b608_hardcoded_sql_expressions.html
Automated tools can produce false positives so we need to check each issue manually
How was this patch tested?
Ran locally:
pre-commit run --all-files
Did this PR include necessary documentation updates?