{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/3"}],"enrichment":{"capability":"Converts Bandit security analysis output into SARIF 2.1.0 format for integration with tools and workflows that consume standardized security reports.","skillfed_tags":["security-scanning","abandoned"],"use_cases":["Export Bandit security findings to a standardized format for ingestion into enterprise security dashboards or SIEM systems.","Integrate Bandit results into CI/CD pipelines that expect SARIF input from multiple static analysis tools.","Archive security scan results in a vendor-neutral format for compliance reporting and historical analysis.","Feed Bandit output to third-party tools that parse SARIF to correlate findings across multiple security scanners."],"what_it_does":"bandit-sarif-formatter is a report formatter plugin for Bandit, Python's security analyzer. It takes Bandit's security findings and outputs them in SARIF (Static Analysis Results Interchange Format) Version 2.1.0, a standardized format maintained by OASIS for security and code-analysis tools. This allows Bandit results to be consumed by CI/CD pipelines, security dashboards, and other tools that understand SARIF.\n\nThe package depends on jschema-to-python and sarif-om to handle schema validation and SARIF object modeling. It is invoked as a command-line flag to Bandit and produces a JSON file containing the analysis results in standard format. However, the package has been abandoned since its initial release and may not work reliably with recent versions of Bandit or Python.","worth_installing":"No. The package is abandoned and has not been updated since 2019-10-05. While it has no known vulnerabilities and low install friction, the lack of maintenance means it will not be compatible with current or future versions of Bandit or Python. Verify first that this formatter works with your current Bandit version before installing."},"id":"bandit-sarif-formatter","links":{"html":"https://skillfed.io/packages/bandit-sarif-formatter","md":"https://skillfed.io/packages/bandit-sarif-formatter.md","pypi":"https://pypi.org/project/bandit-sarif-formatter/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2019-10-05","license_spdx":null,"license_treatment":"permissive","name":"bandit-sarif-formatter","python_support":"supports_current","summary":"A Bandit formatter for the Static Analysis Results Interchange Format (SARIF) Version 2.1.0 file format."},"popularity":{"monthly_downloads":155954,"position":10796,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.1.1"}