developmentseed/action-python-security-auditing

View on GitHub

A GitHub Action that runs bandit (static code analysis) and pip-audit (dependency vulnerability scanning) on a Python repository, then puts the results in one PR comment, the workflow step summary, and a downloadable artifact.

Stars: 0
Forks: 0
Open beginner issues: 0
Indexed issues: 2

Dominant language: Python
License: MIT
Last GitHub push: Apr 9, 2026
Latest indexed: Sep 15, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed
PR merge metrics: No merged PRs in 30d

Beginner friendly Everything

Open All

2 issues indexed so far

Replace PyCQA/bandit action by a ruff with flake8-bandit linter rules Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

developmentseed/action-python-security-auditing#57 · Opened Mar 30, 2026
Switch to upstream PyCQA/bandit-action once SHA pinning is merged Open

dependencies tech-debt

Difficulty 1/5 Under an hour Newbie friendliness 55/100

developmentseed/action-python-security-auditing#6 · Opened Mar 27, 2026

developmentseed/action-python-security-auditing

Get new issues in your inbox