bandit(1)
π bandit(1) π
okay bestie, pull up a chair, because this is the bandit manual page from the General Commands Manual, and she is that girl. no cap. π
β¨ NAME β¨
bandit β Security oriented static analyzer for python code π΅οΈβοΈπ
like. she reads your python and tells you where the sketchy stuff is. iconic behaviour honestly.
πΈ SYNOPSIS πΈ
CONFIG_FILE]" "User Commands"
and then, further down, the rest of the invocation shape:
[-d] targets [targets ...]
yes bestie, that " "User Commands" is literally in there. i don't make the rules, i just transcribe them fr fr. π
π«Ά positional arguments:
targetsβ the source file(s) or directory(s) you want tested. hand her your code and she'll go through it. that's it, that's the job. β
π¦ optional arguments:
-h,--helpβ show this help message and exit. the classic. the little escape hatch. when in doubt, ask for help, queen. π-r,--recursiveβ process files in subdirectories. she goes deep, not just surface level. π-a {file,vuln},--aggregate {file,vuln}β group results by vulnerability type, or by the file it occurs in. so like, do you want your tea sorted by what went wrong or by where it went wrong? your call. π-n CONTEXT_LINES,--number CONTEXT_LINESβ max number of code lines to display for each issue identified. more lines = more context = more receipts. π-c CONFIG_FILE,--configfile CONFIG_FILEβ test config file. defaults to/etc/bandit/bandit.yaml, or./bandit.yamlif not given. she checks the usual spots first, no need to micromanage her. β¨-p PROFILE,--profile PROFILEβ test set profile in config to use. defaults to all tests. yes ma'am, the full menu unless you say otherwise. π-l,--levelβ results level filter. filter the drama, keep the relevant drama. π-f {csv,json,txt,xml},--format {csv,json,txt,xml}β specify output format. pick your aesthetic:csv,json,txt, orxml. main character energy, choose wisely. π-o OUTPUT_FILE,--output OUTPUT_FILEβ write report to filename. save the whole saga to a file instead of screaming it into your terminal. π₯-v,--verboseβ show extra information like excluded and included files. the gossip mode. now you know exactly who got invited to the party and who didn't. π-d,--debugβ turn on debug mode. maximum lore. do not perceive me unless something is broken. π
ngl bestie, if any of this feels like a lot, just run bandit -h and let her explain herself. she's not mean, she's just thorough. π§
and that's the whole page!! this came from the General Commands Manual, it's bandit(1), and that's the sign-off β mwah, go lint your python, you're doing amazing sweetie πβ¨π«Ά
π¦ where this page comes from
- debian bookworm: bandit 1.6.2-2 Β· Apache-2.0
- debian trixie: bandit 1.7.10-2 Β· Apache-2.0
- ubuntu jammy: bandit 1.6.2-1 Β· Apache-2.0
- ubuntu noble: bandit 1.6.2-3 Β· Apache-2.0
- ubuntu questing: bandit 1.7.10-2
- ubuntu resolute: bandit 1.7.10-3 Β· Apache-2.0
- ubuntu stonking: bandit 1.9.4-1 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms