Skip to content

Conversation

JennyPng
Copy link
Member

@JennyPng JennyPng commented Oct 3, 2025

@JennyPng JennyPng marked this pull request as ready for review October 3, 2025 21:16
@Copilot Copilot AI review requested due to automatic review settings October 3, 2025 21:16
Copy link
Contributor

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces a new bandit security check tool that runs independently of tox, as part of the ongoing migration from the slower tox-based framework to a faster direct execution approach.

  • Adds a new bandit module to perform security vulnerability scanning
  • Integrates the bandit check into the main CLI parser and command registration
  • Updates documentation to include the new bandit command

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File Description
eng/tools/azure-sdk-tools/azpysdk/main.py Imports and registers the new bandit module in the CLI
eng/tools/azure-sdk-tools/azpysdk/bandit.py Implements the complete bandit security check functionality
doc/tool_usage_guide.md Documents the new bandit command usage

Copy link
Member

@scbedd scbedd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Inverted condition present.

Copy link
Member

@scbedd scbedd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have a feeling we will want the abstraction to run with PATH prepend + VIRTUAL_ENV set. But approving if you are confident in the runs on this guy.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants