# Bandit: reference & source

> Find common Python security issues through AST-based static analysis. Reference only in Awesome Python Dev; review its source, license and setup.

[HTML page](https://m9rco.github.io/awesome-python-dev/tools/bandit/) · [Agent guide](https://m9rco.github.io/awesome-python-dev/agents/index.md) · [Discovery index](https://m9rco.github.io/awesome-python-dev/llms.txt)

This website describes the repository catalog snapshot, which may contain unreleased entries. It is not a promise that every entry exists in the currently published package. Check `uvx awesome-python-dev list --json` for the catalog available in your installed runtime. GitHub stars and review dates are recorded snapshots, not live rankings.

Catalog reviewed: 2026-10-29. [Catalog source](https://github.com/m9rco/awesome-python-dev/blob/239895d3dd1353a48c5b39eee8eb028aadd8ac8f/src/awesome_python_dev/data/catalog.json).

References / Reference only

## Bandit

Find common Python security issues through AST-based static analysis.

[Upstream project ↗](https://github.com/PyCQA/bandit) [View repository ↗](https://github.com/PyCQA/bandit) 

### Install with the upstream project

This entry is a reference. It has no `apd init` recipe in this catalog snapshot. Follow the [upstream documentation](https://github.com/PyCQA/bandit)  for installation and configuration.

### Integration notes

Add as a development or CI dependency, configure exclusions and severity/confidence policy, and review findings. Does not replace dependency or secret scanning.

### Source & review

- Repository: PyCQA/bandit
- License: Apache-2.0
- Category: security tooling
- Reviewed: 2026-10-27
- GitHub stars at review: 8,352
- Installation: Reference only

Star counts are review snapshots, not live rankings. Upstream licenses apply to each resource.

### Review the source evidence

- [Upstream evidence 1 ↗](https://api.github.com/repos/PyCQA/bandit) 
- [Upstream evidence 2 ↗](https://github.com/PyCQA/bandit) 
- [Upstream evidence 3 ↗](https://bandit.readthedocs.io/en/latest/start.html)