Add Bandit to CI pipeline and update security audit documentation

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
2026-02-07 19:38:47 +00:00
parent edd1acb3a1
commit 755ef8a2e5
3 changed files with 164 additions and 22 deletions
@@ -44,10 +44,18 @@ jobs:
        run: pylint app/ --max-line-length=120 --disable=C0111,C0103,R0903
        continue-on-error: true
      
-      - name: Run Security Linter (Bandit)
-        run: bandit -r app/ -ll -f json -o bandit-report.json
+      - name: Run Security Linter (Bandit) - Full Report
+        run: |
+          echo "Running Bandit security scan..."
+          bandit -r app/ -f json -o bandit-report.json || true
        continue-on-error: true
      
+      - name: Run Security Linter (Bandit) - Fail on High/Medium
+        run: |
+          echo "Running Bandit security scan (fail on high/medium severity)..."
+          bandit -r app/ -ll
+        continue-on-error: false
+      
      - name: Upload Bandit Report
        uses: actions/upload-artifact@v4
        if: always()