[metadata]
name = bandit
summary = Security oriented static analyser for python code.
description-file =
    README.md
author = OpenStack Security Group
author-email = openstack-dev@lists.openstack.org
home-page = https://wiki.openstack.org/wiki/Security/Projects/Bandit
classifier =
    Environment :: OpenStack
    Intended Audience :: Information Technology
    Intended Audience :: System Administrators
    Intended Audience :: Developers
    License :: OSI Approved :: Apache Software License
    Operating System :: POSIX :: Linux
    Operating System :: MacOS :: MacOS X
    Programming Language :: Python
    Programming Language :: Python :: 2
    Programming Language :: Python :: 2.7
    Programming Language :: Python :: 3.4
    Topic :: Security

[entry_points]
console_scripts =
    bandit = bandit.bandit:main
bandit.formatters =
    csv = bandit.core.formatters:report_csv
    json = bandit.core.formatters:report_json
    txt = bandit.core.formatters:report_text
    xml = bandit.core.formatters:report_xml
bandit.plugins =
    # bandit/plugins/asserts.py
    assert_used = bandit.plugins.asserts:assert_used

    # bandit/plugins/blacklist_calls.py
    blacklist_calls = bandit.plugins.blacklist_calls:blacklist_calls

    # bandit/plugins/blacklist_imports.py
    blacklist_imports = bandit.plugins.blacklist_imports:blacklist_imports
    blacklist_import_func = bandit.plugins.blacklist_imports:blacklist_import_func

    # bandit/plugins/crypto_request_no_cert_validation.py
    request_with_no_cert_validation = bandit.plugins.crypto_request_no_cert_validation:request_with_no_cert_validation

    # bandit/plugins/exec_as_root.py
    execute_with_run_as_root_equals_true = bandit.plugins.exec_as_root:execute_with_run_as_root_equals_true

    # bandit/plugins/exec.py
    exec_used = bandit.plugins.exec:exec_used

    # bandit/plugins/general_bad_File_permissions.py
    set_bad_file_permissions = bandit.plugins.general_bad_file_permissions:set_bad_file_permissions

    # bandit/plugins/general_bind_all_interfaces.py
    hardcoded_bind_all_interfaces = bandit.plugins.general_bind_all_interfaces:hardcoded_bind_all_interfaces

    # bandit/plugins/general_hardcoded_password.py
    hardcoded_password = bandit.plugins.general_hardcoded_password:hardcoded_password

    # bandit/plugins/general_hardcoded_tmp.py
    hardcoded_tmp_directory = bandit.plugins.general_hardcoded_tmp:hardcoded_tmp_directory

    # bandit/plugins/injection_paramiko.py
    paramiko_calls = bandit.plugins.injection_paramiko:paramiko_calls

    # bandit/plugins/injection_shell.py
    subprocess_popen_with_shell_equals_true = bandit.plugins.injection_shell:subprocess_popen_with_shell_equals_true
    subprocess_without_shell_equals_true = bandit.plugins.injection_shell:subprocess_without_shell_equals_true
    any_other_function_with_shell_equals_true = bandit.plugins.injection_shell:any_other_function_with_shell_equals_true
    start_process_with_a_shell = bandit.plugins.injection_shell:start_process_with_a_shell
    start_process_with_no_shell = bandit.plugins.injection_shell:start_process_with_no_shell
    start_process_with_partial_path = bandit.plugins.injection_shell:start_process_with_partial_path

    # bandit/plugins/injection_sql.py
    hardcoded_sql_expressions = bandit.plugins.injection_sql:hardcoded_sql_expressions

    # bandit/plugins/injection_wildcard.py
    linux_commands_wildcard_injection = bandit.plugins.injection_wildcard:linux_commands_wildcard_injection

    # bandit/plugins/insecure_ssl_tls.py
    ssl_with_bad_version = bandit.plugins.insecure_ssl_tls:ssl_with_bad_version
    ssl_with_bad_defaults = bandit.plugins.insecure_ssl_tls:ssl_with_bad_defaults
    ssl_with_no_version = bandit.plugins.insecure_ssl_tls:ssl_with_no_version

    # bandit/plugins/jinja2_templates.py
    jinja2_autoescape_false = bandit.plugins.jinja2_templates:jinja2_autoescape_false

    # bandit/plugins/mako_templates.py
    use_of_mako_templates = bandit.plugins.mako_templates:use_of_mako_templates

    # bandit/plugins/secret_config_options.py
    password_config_option_not_marked_secret = bandit.plugins.secret_config_option:password_config_option_not_marked_secret

    # bandit/plugins/try_except_pass.py
    try_except_pass = bandit.plugins.try_except_pass:try_except_pass

    # bandit/plugins/xlm.py
    etree_celement_function_calls = bandit.plugins.xml:etree_celement_function_calls
    etree_element_function_calls = bandit.plugins.xml:etree_element_function_calls
    expatreader_function_calls = bandit.plugins.xml:expatreader_function_calls
    expatbuilder_function_calls = bandit.plugins.xml:expatbuilder_function_calls
    sax_function_calls = bandit.plugins.xml:sax_function_calls
    minidom_function_calls = bandit.plugins.xml:minidom_function_calls
    pulldom_function_calls = bandit.plugins.xml:pulldom_function_calls
    lxml_function_calls = bandit.plugins.xml:lxml_function_calls
    etree_celement_import = bandit.plugins.xml:etree_celement_import
    etree_element_import = bandit.plugins.xml:etree_element_import
    expatreader_import = bandit.plugins.xml:expatreader_import
    expatbuilder_import = bandit.plugins.xml:expatbuilder_import
    sax_import = bandit.plugins.xml:sax_import
    minidom_import = bandit.plugins.xml:minidom_import
    pulldom_import = bandit.plugins.xml:pulldom_import
    xmlrpclib_import = bandit.plugins.xml:xmlrpclib_import
    lxml_import = bandit.plugins.xml:lxml_import

[files]
package_data =
    bandit = config/bandit.yaml
data_files =
    bandit =
        share/bandit/wordlist/ = wordlist/default-passwords