Conversation
| bandit: | ||
| cache: {} | ||
| image: | ||
| name: cytopia/bandit:1-py3.10 |
There was a problem hiding this comment.
Thanks! Good addition. Looking at this though, makes me realise we should really start producing our own images, just in case cytopia/bandit:1-py3.10 were to fall into bad hands. I will raise an issue, but until then let's keep this PR open.
There was a problem hiding this comment.
Hello, @lukehinds! Thanks for considering this contribution. Yes, I also noticed that using the cytopia image is suboptimal and first-party Docker images would be preferable. By adding this job to the documentation, users might get encouraged to trust the source of the image. I have subscribed to the issue about creating such an image, so I can update this PR with the image name.
There was a problem hiding this comment.
We now have official images: https://github.com/PyCQA/bandit?tab=readme-ov-file#container-images
There was a problem hiding this comment.
Yes, please switch the official Bandit image.
| GitLab CI/CD integration | ||
| ------------------ |
There was a problem hiding this comment.
| GitLab CI/CD integration | |
| ------------------ | |
| GitLab CI/CD integration | |
| ------------------------ |
| bandit: | ||
| cache: {} | ||
| image: | ||
| name: cytopia/bandit:1-py3.10 |
There was a problem hiding this comment.
Yes, please switch the official Bandit image.
3 participants
This documents how to add a job to GitLab CI/CD for running Bandit.