Rule to invoke Bandit from webservice running on Cloud Run #225
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is an example of using mindersec/minder#5181 to invoke https://github.com/PyCQA/bandit on a PR using Minder and an external web service (in this case, hosted on https://cloud.google.com/run out of familiarity).
The demo consists of the following parts:
A local minder server with Add support for base and target trees in git ingest, add .tar.gz bundler minder#5181 and the
pr_comment_alert
feature enabledA Cloud Run service running https://github.com/evankanderson/banditize from a (hand-built) container
The rule in this profile.
The following profile:
This will be further improved by mindersec/minder#5192 (to allow us to put the details directly in the comment), and mindersec/minder#5144 to feed details from the evaluation into the PR comment / alert.