Merge pull request #113 from christianlouis/copilot/run-security-audit-with-bandit

Security audit: Fix 21 vulnerabilities and integrate Bandit into CI
2026-02-07 21:42:07 +01:00
parent 264da6319e 7fc2703d90
commit feefae51f1
17 changed files with 228 additions and 46 deletions
@@ -44,10 +44,18 @@ jobs:
        run: pylint app/ --max-line-length=120 --disable=C0111,C0103,R0903
        continue-on-error: true
      
-      - name: Run Security Linter (Bandit)
-        run: bandit -r app/ -ll -f json -o bandit-report.json
+      - name: Run Security Linter (Bandit) - Full Report
+        run: |
+          echo "Running Bandit security scan..."
+          bandit -r app/ -f json -o bandit-report.json || true
        continue-on-error: true
      
+      - name: Run Security Linter (Bandit) - Fail on High/Medium
+        run: |
+          echo "Running Bandit security scan (fail on high/medium severity)..."
+          bandit -r app/ -ll
+        continue-on-error: false
+      
      - name: Upload Bandit Report
        uses: actions/upload-artifact@v4
        if: always()