73 lines
2.2 KiB
Python
73 lines
2.2 KiB
Python
# -*- coding:utf-8 -*-
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
r"""
|
|
Description
|
|
-----------
|
|
This formatter outputs the issues in a comma separated values format.
|
|
|
|
Sample Output
|
|
-------------
|
|
.. code-block:: none
|
|
|
|
filename,test_name,issue_severity,issue_confidence,issue_text,line_number,
|
|
line_range
|
|
examples/yaml_load.py,blacklist_calls,MEDIUM,HIGH,"Use of unsafe yaml load.
|
|
Allows instantiation of arbitrary objects. Consider yaml.safe_load().
|
|
",5,[5]
|
|
|
|
.. versionadded:: 0.11.0
|
|
|
|
"""
|
|
|
|
from __future__ import absolute_import
|
|
import csv
|
|
import logging
|
|
|
|
from bandit.core import utils
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
def report(manager, filename, sev_level, conf_level, lines=-1):
|
|
'''Prints issues in CSV format
|
|
|
|
:param manager: the bandit manager object
|
|
:param filename: The output file name, or None for stdout
|
|
:param sev_level: Filtering severity level
|
|
:param conf_level: Filtering confidence level
|
|
:param lines: Number of lines to report, -1 for all
|
|
'''
|
|
|
|
results = manager.get_issue_list(sev_level=sev_level,
|
|
conf_level=conf_level)
|
|
|
|
with utils.output_file(filename, 'w') as fout:
|
|
fieldnames = ['filename',
|
|
'test_name',
|
|
'issue_severity',
|
|
'issue_confidence',
|
|
'issue_text',
|
|
'line_number',
|
|
'line_range']
|
|
|
|
writer = csv.DictWriter(fout, fieldnames=fieldnames,
|
|
extrasaction='ignore')
|
|
writer.writeheader()
|
|
for result in results:
|
|
writer.writerow(result.as_dict(with_code=False))
|
|
|
|
if filename is not None:
|
|
logger.info("CSV output written to file: %s" % filename)
|