PyCQA/bandit as a web service.
This is a small web service (designed to be run under Google Cloud Run or the like that wraps PyCQA/bandit in a JSON-based API. The input format is:
{
"base": "... base64-encoded .tar.gz of the base filesystem ...",
"head": "... base64-encoded .tar.gz of the proposed changed filesystem ..."
}You may omit base to scan a directory from scratch.
In turn, this currently returns a single field, but we may expand it later:
{
"simpleFindings": "... bandit output ..."
}
## Usage
To test on the command line in a python directory, you can do the following:
curl --data @<(echo "{"head":"$(tar -czf - . | base64 -i -)"}") http://localhost:7777/pull
## Deployment
This is also deployed on Google Cloud Run at the following URL via CI:
https://banditize-562949304223.us-central1.run.app/