codacy compatibility

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
CycloneDX · Oct 21, 2023 · 289efec · 289efec
1 parent 05fd828
commit 289efec
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 10 deletions.
diff --git a/.bandit.yaml b/.bandit.yaml
diff --git a/bandit.yml b/bandit.yml
@@ -0,0 +1,9 @@
+# https://bandit.readthedocs.io
+# filename must be like this, so codacy can pick it up: https://github.com/codacy/codacy-bandit/blob/master/src/main/scala/codacy/bandit/Bandit.scala#L35C49-L35C59
+
+exclude_dirs:
+  - docs
+  - .venv
+
+skips:
+  - B101
diff --git a/cyclonedx/model/__init__.py b/cyclonedx/model/__init__.py
@@ -55,7 +55,7 @@ def sha1sum(filename: str) -> str:
     Returns:
         SHA-1 hash
     """
-    h = sha1()  # nosec B303,B324
+    h = sha1()  # nosec B303, B324
     with open(filename, 'rb') as f:
         for byte_block in iter(lambda: f.read(4096), b''):
             h.update(byte_block)

diff --git a/tox.ini b/tox.ini
@@ -41,6 +41,6 @@ commands =
 
 [testenv:bandit]
 commands =
-    poetry run bandit -c .bandit.yaml -v
+    poetry run bandit -c bandit.yml -v -r cyclonedx tests examples tools