diff --git a/bandit.yml b/bandit.yml new file mode 100644 index 0000000..fa4fc8a --- /dev/null +++ b/bandit.yml @@ -0,0 +1,33 @@ +name: Bandit Security Check + +on: + push: + branches: + - main + pull_request: + branches: + - main + +jobs: + bandit: + runs-on: ubuntu-latest + + steps: + - name: Checkout code + uses: actions/checkout@v3 + + - name: Set up Python + uses: actions/setup-python@v4 + with: + python-version: '3.9' + + - name: Install dependencies + run: | + python -m pip install --upgrade pip + pip install -r requirements.txt + + - name: Install Bandit + run: pip install bandit + + - name: Run Bandit + run: bandit -r your_project_directory