FreshPorts -- devel/py-bandit: Tool for finding common security issues in Python code

Port details

py-bandit Tool for finding common security issues in Python code

1.7.10_1 devel =2 1.7.10_1Version of this port present on the latest quarterly branch.

Maintainer: yuri@FreeBSD.org

Port Added: 2016-01-03 20:40:58

Last Update: 2025-03-08 04:05:21

Commit Hash: 06a08e6

People watching this port, also watch:: jdictionary, py311-Automat, py311-python-gdsii, py311-PyOpenGL, p5-Sane

Also Listed In: python security

License: APACHE20

WWW:

https://github.com/PyCQA/bandit

Description:

Bandit is a tool for finding common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs appropriate plugins against the AST nodes. Once Bandit has finished scanning all the files it generates a report.

¦ ¦ ¦ ¦

Manual pages:

FreshPorts has no man page information for this port.

pkg-plist: as obtained via: make generate-plist

There is no configure plist information for this port.

Dependency lines:

${PYTHON_PKGNAMEPREFIX}bandit>0:devel/py-bandit@${PY_FLAVOR}

To install the port:

cd /usr/ports/devel/py-bandit/ && make install clean

To add the package, run one of these commands:

pkg install devel/py-bandit
pkg install py311-bandit

NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
NOTE: This is a Python port. Instead of py311-bandit listed in the above command, you can pick from the names under the Packages section.

PKGNAME: py311-bandit

Package flavors (<flavor>: <package>)

py311: py311-bandit

distinfo:

TIMESTAMP = 1728531392 SHA256 (bandit-1.7.10.tar.gz) = 59ed5caf5d92b6ada4bf65bc6437feea4a9da1093384445fed4d472acc6cff7b SIZE (bandit-1.7.10.tar.gz) = 4228540

Packages (timestamps in pop-ups are UTC):

py37-bandit
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	-	-	1.7.0	-	-	-	1.7.0	-
FreeBSD:13:quarterly	-	-	-	-	-	-	-	-
FreeBSD:14:latest	-	-	-	-	-	-	-	-
FreeBSD:14:quarterly	-	-	-	-	-	-	-	-
FreeBSD:15:latest	-	-	n/a	-	n/a	-	-	-

py39-bandit
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	-	-	-	-	-	-	-	-
FreeBSD:13:quarterly	-	-	1.7.5	-	-	1.7.6	1.7.6	1.7.6
FreeBSD:14:latest	-	-	1.7.4	-	-	1.7.5	-	1.7.5
FreeBSD:14:quarterly	-	-	-	-	-	1.7.6	1.7.6	1.7.6
FreeBSD:15:latest	-	-	n/a	-	n/a	1.7.7	1.7.7	1.7.7

py311-bandit
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	1.7.10_1	1.7.10_1	-	1.7.10_1	1.7.10_1	-	-	-
FreeBSD:13:quarterly	1.7.10_1	1.7.10_1	-	1.7.10_1	1.7.10_1	-	-	-
FreeBSD:14:latest	1.7.10_1	1.7.10_1	-	1.7.10_1	1.7.10_1	-	-	-
FreeBSD:14:quarterly	1.7.10_1	1.7.10_1	-	1.7.10_1	1.7.10_1	-	-	-
FreeBSD:15:latest	1.7.10_1	1.7.10_1	n/a	1.7.10_1	n/a	-	-	-

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

py311-pbr>=2.0.0 : devel/py-pbr@py311
py311-setuptools>=63.1.0 : devel/py-setuptools@py311
python3.11 : lang/python311

Test dependencies:

py311-beautifulsoup>=4.8.0 : www/py-beautifulsoup@py311
py311-coverage>=4.5.4 : devel/py-coverage@py311
py311-fixtures>=3.0.0 : devel/py-fixtures@py311
py311-flake8>=4.0.0 : devel/py-flake8@py311
pylint-py311>=1.9.4 : devel/pylint@py311
py311-testscenarios>=0.5.0 : devel/py-testscenarios@py311
py311-testtools>=2.3.0 : devel/py-testtools@py311
py311-tomli>=1.1.0 : textproc/py-tomli@py311
py311-pytest>=7,1 : devel/py-pytest@py311
python3.11 : lang/python311

Runtime dependencies:

py311-gitpython>=3.1.30 : devel/py-gitpython@py311
py311-rich>0 : textproc/py-rich@py311
py311-stevedore>=1.20.0 : devel/py-stevedore@py311
py311-pyyaml>=5.3.1 : devel/py-pyyaml@py311
py311-jschema-to-python>=1.2.3 : devel/py-jschema-to-python@py311
py311-sarif-om>=1.0.4 : devel/py-sarif-om@py311
python3.11 : lang/python311

This port is required by:

for Run

Configuration Options:

No options to configure

Options name:

devel_py-bandit

USES:

python

FreshPorts was unable to extract/find any pkg message

Master Sites:

Expand this list (2 items)

Collapse this list.

Number of commits found: 35

Commit	Credits	Log message
Commit History - (may be incomplete: for full details, see links to repositories near top of page)
1.7.10_1 08 Mar 2025 04:05:21	Charlie Li (vishwin)	python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal Any missed ports, feel free to bump. Any ports that need setuptools at runtime can have the devel/py-setuptools manually added back to RUN_DEPENDS, but understand that this practice is deprecated; see CHANGES for details.
1.7.10 10 Oct 2024 03:53:05	Yuri Victorovich (yuri)	devel/py-bandit: update 1.7.9 → 1.7.10 Reported by: portscout
1.7.9_1 07 Jul 2024 08:05:33	Po-Chuan Hsieh (sunpoet)	devel/py-pyyaml: Move devel/py-yaml to devel/py-pyyaml - Bump PORTREVISION of dependent ports for dependency change
1.7.9 13 Jun 2024 05:23:03	Yuri Victorovich (yuri)	devel/py-bandit: update 1.7.8 → 1.7.9 Reported by: portscout
1.7.8 12 Mar 2024 19:42:10	Yuri Victorovich (yuri)	devel/py-bandit: update 1.7.7 → 1.7.8 Reported by: portscout
1.7.7 24 Jan 2024 08:25:57	Yuri Victorovich (yuri)	devel/py-bandit: update 1.7.6 → 1.7.7 Reported by: portscout
1.7.6 23 Dec 2023 22:57:29	Yuri Victorovich (yuri)	devel/py-bandit: update 1.7.5 → 1.7.6 Reported by: portscout
1.7.5 27 Jun 2023 19:34:34	Rene Ladan (rene)	all: remove explicit versions in USES=python for "3.x+" The logic in USES=python will automatically convert this to 3.8+ by itself. Adjust two ports that only had Python 3.7 mentioned but build fine on Python 3.8 too. finance/quickfix: mark BROKEN with PYTHON libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option] QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found ^~~~~~~~~~ 1 warning and 1 error generated. Reviewed by: portmgr, vishwin, yuri Differential Revision: <https://reviews.freebsd.org/D40568>
1.7.5 11 Mar 2023 09:16:15	Yuri Victorovich (yuri)	devel/py-bandit: Update 1.7.4 → 1.7.5 Reported by: portscout
1.7.4 11 Jan 2023 15:58:34	Dmitry Marakasov (amdmi3)	/: rename CHEESESHOP to PYPI in MASTER_SITES PR: 267994 Differential revision: D37518 Approved by: bapt
07 Sep 2022 21:58:51	Stefan Eßer (se)	Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)
1.7.4 07 Sep 2022 21:10:59	Stefan Eßer (se)	Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. (Only the first 15 lines of the commit message are shown above )
1.7.4 20 Jul 2022 14:21:35	Tobias C. Berner (tcberner)	devel: remove 'Created by' lines A big Thank You to the original contributors of these ports: * "Waitman Gobble" <uzimac@da3m0n8t3r.com> * <jkoshy@FreeBSD.org> * Aaron Dalton <aaron@FreeBSD.org> * Aaron Dalton <aaron@daltons.ca> * Aaron H. K. Diep <ahkdiep@gmail.com> * Aaron Hurt <ahurt@anbcs.com> * Abel Chow <abel_chow@yahoo.com> * Adam McLaurin * Adam Saponara <as@php.net> * Adam Weinberger <adamw@FreeBSD.org> * Ade Lovett <ade@FreeBSD.org> (Only the first 15 lines of the commit message are shown above )
1.7.4 24 Apr 2022 01:45:31	Yuri Victorovich (yuri)	devel/py-bandit: Update 1.7.1 -> 1.7.4 Reported by: portscout
1.7.1 13 Nov 2021 21:59:23	Yuri Victorovich (yuri)	devel/py-bandit: Update 1.7.0 -> 1.7.1 Reported by: portscout
1.7.0_1 29 Apr 2021 17:53:44	Guangyuan Yang (ygy)	Unbreak ports after devel/py-gitpython's PORTNAME change PR: 255489 Fixes: f133c410c6d97254810f4f0fbd329e42b9eaf3a1 Approved by: lwhsu, portmgr (blanket) Differential Revision: https://reviews.freebsd.org/D30039
1.7.0 06 Apr 2021 14:31:07	Mathieu Arnold (mat)	Remove # $FreeBSD$ from Makefiles.
1.7.0 28 Dec 2020 23:02:15	antoine	Drop python 2.7 support from a few ports With hat: portmgr
1.7.0 21 Dec 2020 01:30:39	yuri	devel/py-bandit: Update 1.6.2 -> 1.7.0
1.6.2 27 Jul 2019 07:06:39	yuri	devel/py-bandit: Update 1.6.1 -> 1.6.2 Reported by: repology
1.6.1 20 Jun 2019 03:29:12	yuri	devel/py-bandit: Update 1.6.0 -> 1.6.1 Reported by: portscout
1.6.0 11 May 2019 03:51:27	yuri	devel/py-bandit: Update 1.5.1 -> 1.6.0 Reported by: portscout
1.5.1 09 Sep 2018 16:59:01	yuri	devel/py-bandit: Update 1.5.0 -> 1.5.1 Reported by: portscout
1.5.0 18 Aug 2018 07:13:22	yuri	devel/py-bandit: Update 1.4.0 -> 1.5.0 Reported by: portscout
1.4.0 20 Jun 2018 17:05:44	mat	Use PY_FLAVOR for dependencies. FLAVOR is the current port's flavor, it should not be used outside of this scope. Sponsored by: Absolight
1.4.0 25 Feb 2018 00:40:37	yuri	Replaced my old rawbw.com maintainer's address with yuri@FreeBSD.org 98 ports are affected. Approved by: tcberner (mentor, implicit)
1.4.0 30 Nov 2017 15:50:34	mat	Convert Python ports to FLAVORS. Ports using USE_PYTHON=distutils are now flavored. They will automatically get flavors (py27, py34, py35, py36) depending on what versions they support. There is also a USE_PYTHON=flavors for ports that do not use distutils but need FLAVORS to be set. A USE_PYTHON=noflavors can be set if using distutils but flavors are not wanted. A new USE_PYTHON=optsuffix that will add PYTHON_PKGNAMESUFFIX has been added to cope with Python ports that did not have the Python PKGNAMEPREFIX but are flavored. USES=python now also exports a PY_FLAVOR variable that contains the (Only the first 15 lines of the commit message are shown above )
1.4.0 06 Feb 2017 20:15:17	olivierd	Update to 1.4.0 PR: 216709 Submitted by: Yuri Victorovich (maintainer)
1.3.0 03 Dec 2016 17:23:53	olivierd	Update to 1.3.0 PR: 215022 Submitted by: Yuri Victorovich (maintainer)
1.2.0 20 Nov 2016 16:02:08	olivierd	Update to 1.2.0 PR: 214662 Submitted by: Yuri Victorovich (maintainer)
1.1.0 18 Aug 2016 09:32:33	amdmi3	- Update to 1.1.0 PR: 211915 Submitted by: yuri@rawbw.com (maintainer)
1.0.1 20 May 2016 17:48:22	pi	devel/py-bandit: 0.17.3 -> 1.0.1 - Adding accurate docs for new bandit config - Fixing a bug exposed with try, except, ... tests - Ensure error exit codes fail integrations - Calm down try,except,pass and try,except,continue - Normalizing & editing command-line help text - Added try_except_continue plugin - Adding test IDs to test doc titles - Fixing documentation for hardcoded password tests - Delete the config, we dont need it now and its also invalid - Improving config handling - Blacklists now check node types are valid - Fix OpenStack coverage tool - Moving test summary to end of screen results (Only the first 15 lines of the commit message are shown above )
0.17.3 01 Apr 2016 14:00:57	mat	Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g. With hat: portmgr Sponsored by: Absolight
0.17.3 02 Mar 2016 22:49:05	rakuco	Update to 0.17.3. PR: 207650 Submitted by: yuri@rawbw.com (maintainer)
0.16.1 03 Jan 2016 20:40:50	pi	New port: devel/py-bandit Bandit is a tool for finding common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs appropriate plugins against the AST nodes. Once Bandit has finished scanning all the files it generates a report. WWW: https://github.com/stackforge/bandit PR: 201386 Submitted by: yuri@rawbw.com Reviewed by: koobs

Number of commits found: 35

Login
User Login Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts? About the authors Issues FAQ How big is it? Security Policy Privacy Blog Contact

Search
Enter Keywords: more...

Latest Vulnerabilities

libxml2	Jul 12
libxslt	Jul 12
linux-c7-libxml2	Jul 12
linux-c7-libxslt	Jul 12
linux-rl9-libxml2	Jul 12
linux-rl9-libxslt	Jul 12
apache24	Jul 11
gitlab	Jul 10
tomcat101	Jul 10
tomcat110	Jul 10
tomcat9	Jul 10
git	Jul 08
git-cvs	Jul 08
git-gui	Jul 08
git-p4	Jul 08

27 vulnerabilities affecting 386 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last processed:
2025-07-12 09:42:47 UTC

Ports
Home Categories Deleted ports Sanity Test Failures Newsfeeds

Statistics

Graphs
NEW Graphs (Javascript)

Calculated hourly:

Port count	33441
Broken	133
Deprecated	236
Ignore	250
Forbidden	0
Restricted	2
No CDROM	1
Vulnerable	40
Expired	19
Set to expire	183
Interactive	0
new 24 hours	1
new 48 hours	4
new 7 days	22
new fortnight	123
new month	231

Bot filter coming soon