Glossary: Endpoint, Application and Email Security

Bandit

Also written: bandit

A free static analysis tool for Python. On the old shop code it flagged SQL built from strings (B608) and a shell=True command (B602), each with a severity.

Where the book teaches it

Chapter 3: Application Security

Related terms

static code analysis SAST (static application security testing)false positive