- [x] `S101`: [`assert_used`](https://bandit.readthedocs.io/en/latest/plugins/b101_assert_used.html) - [x] `S102`: [`exec_used`](https://bandit.readthedocs.io/en/latest/plugins/b102_exec_used.html) - [x] `S103`: [`set_bad_file_permissions`](https://bandit.readthedocs.io/en/latest/plugins/b103_set_bad_file_permissions.html) - [x] `S104`: [`hardcoded_bind_all_interfaces`](https://bandit.readthedocs.io/en/latest/plugins/b104_hardcoded_bind_all_interfaces.html) - [x] `S105`: [`hardcoded_password_string`](https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html) - [x] `S106`: [`hardcoded_password_funcarg`](https://bandit.readthedocs.io/en/latest/plugins/b106_hardcoded_password_funcarg.html) - [x] `S107`: [`hardcoded_password_default`](https://bandit.readthedocs.io/en/latest/plugins/b107_hardcoded_password_default.html) - [x] `S108`: [`hardcoded_tmp_directory`](https://bandit.readthedocs.io/en/latest/plugins/b108_hardcoded_tmp_directory.html) - [x] ~`S109`: [`password_config_option_not_marked_secret`](https://bandit.readthedocs.io/en/latest/plugins/b109_password_config_option_not_marked_secret.html)~ - [x] `S110`: [`try_except_pass`](https://bandit.readthedocs.io/en/latest/plugins/b110_try_except_pass.html) - [x] ~`S111`: [`execute_with_run_as_root_equals_true`](https://bandit.readthedocs.io/en/latest/plugins/b111_execute_with_run_as_root_equals_true.html)~ - [x] `S112`: [`try_except_continue`](https://bandit.readthedocs.io/en/latest/plugins/b112_try_except_continue.html) - [x] `S113`: [`request_without_timeout`](https://bandit.readthedocs.io/en/latest/plugins/b113_request_without_timeout.html) - [x] `S201`: [`flask_debug_true`](https://bandit.readthedocs.io/en/latest/plugins/b201_flask_debug_true.html) - [x] `S202`: [`tarfile_unsafe_members`](https://bandit.readthedocs.io/en/latest/plugins/b202_tarfile_unsafe_members.html) - [x] `S301`: [`pickle`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S302`: [`marshal`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S303`: [`md5`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S304`: [`ciphers`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S305`: [`cipher_modes`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S306`: [`mktemp_q`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S307`: [`eval`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S308`: [`mark_safe`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S311`: [`random`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S312`: [`telnetlib`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S313`: [`xml_bad_cElementTree`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S314`: [`xml_bad_ElementTree`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S315`: [`xml_bad_expatreader`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S316`: [`xml_bad_expatbuilder`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S317`: [`xml_bad_sax`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S318`: [`xml_bad_minidom`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S319`: [`xml_bad_pulldom`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S320`: [`xml_bad_etree`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S321`: [`ftplib`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S323`: [`unverified_context`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html) - [x] `S324`: [`hashlib`](https://bandit.readthedocs.io/en/latest/plugins/b324_hashlib.html) - [x] `S310`: [`urllib_urlopen`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b310-urllib-urlopen) - [x] `S401`: [`import_telnetlib`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b401-import-telnetlib) - [x] `S402`: [`import_ftplib`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b402-import-ftplib) - [x] `S403`: [`import_pickle`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b403-import-pickle) - [x] `S404`: [`import_subprocess`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b404-import-subprocess) - [x] `S405`: [`import_xml_etree`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b405-import-xml-etree) - [x] `S406`: [`import_xml_sax`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b406-import-xml-sax) - [x] `S407`: [`import_xml_expat`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b407-import-xml-expat) - [x] `S408`: [`import_xml_minidom`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b408-import-xml-minidom) - [x] `S409`: [`import_xml_pulldom`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b409-import-xml-pulldom) - [x] `S410`: [`import_lxml`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b410-import-lxml) - [x] `S411`: [`import_xmlrpclib`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b411-import-xmlrpclib) - [x] `S412`: [`import_httpoxy`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b412-import-httpoxy) - [x] `S413`: [`import_pycrypto`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b413-import-pycrypto) - [x] `S415`: [`import_pyghmi`](https://bandit.readthedocs.io/en/latest/blacklists/blacklist_imports.html#b415-import-pyghmi) - [x] `S501`: [`request_with_no_cert_validation`](https://bandit.readthedocs.io/en/latest/plugins/b501_request_with_no_cert_validation.html) - [x] `S502`: [`ssl_with_bad_version`](https://bandit.readthedocs.io/en/latest/plugins/b502_ssl_with_bad_version.html) - [x] `S503`: [`ssl_with_bad_defaults`](https://bandit.readthedocs.io/en/latest/plugins/b503_ssl_with_bad_defaults.html) - [x] `S504`: [`ssl_with_no_version`](https://bandit.readthedocs.io/en/latest/plugins/b504_ssl_with_no_version.html) - [x] `S505`: [`weak_cryptographic_key`](https://bandit.readthedocs.io/en/latest/plugins/b505_weak_cryptographic_key.html) - [x] `S506`: [`yaml_load`](https://bandit.readthedocs.io/en/latest/plugins/b506_yaml_load.html) - [x] `S507`: [`ssh_no_host_key_verification`](https://bandit.readthedocs.io/en/latest/plugins/b507_ssh_no_host_key_verification.html) - [x] `S508`: [`snmp_insecure_version`](https://bandit.readthedocs.io/en/latest/plugins/b508_snmp_insecure_version.html) - [x] `S509`: [`snmp_weak_cryptography`](https://bandit.readthedocs.io/en/latest/plugins/b509_snmp_weak_cryptography.html) - [x] `S601`: [`paramiko_calls`](https://bandit.readthedocs.io/en/latest/plugins/b601_paramiko_calls.html) - [x] `S602`: [`subprocess_popen_with_shell_equals_true`](https://bandit.readthedocs.io/en/latest/plugins/b602_subprocess_popen_with_shell_equals_true.html) - [x] `S603`: [`subprocess_without_shell_equals_true`](https://bandit.readthedocs.io/en/latest/plugins/b603_subprocess_without_shell_equals_true.html) - [x] `S604`: [`any_other_function_with_shell_equals_true`](https://bandit.readthedocs.io/en/latest/plugins/b604_any_other_function_with_shell_equals_true.html) - [x] `S605`: [`start_process_with_a_shell`](https://bandit.readthedocs.io/en/latest/plugins/b605_start_process_with_a_shell.html) - [x] `S606`: [`start_process_with_no_shell`](https://bandit.readthedocs.io/en/latest/plugins/b606_start_process_with_no_shell.html) - [x] `S607`: [`start_process_with_partial_path`](https://bandit.readthedocs.io/en/latest/plugins/b607_start_process_with_partial_path.html) - [x] `S608`: [`hardcoded_sql_expressions`](https://bandit.readthedocs.io/en/latest/plugins/b608_hardcoded_sql_expressions.html) - [x] `S609`: [`linux_commands_wildcard_injection`](https://bandit.readthedocs.io/en/latest/plugins/b609_linux_commands_wildcard_injection.html) - [x] `S610`: [`django_extra_used`](https://bandit.readthedocs.io/en/latest/plugins/b610_django_extra_used.html) - [x] `S611`: [`django_rawsql_used`](https://bandit.readthedocs.io/en/latest/plugins/b611_django_rawsql_used.html) - [x] `S612`: [`logging_config_insecure_listen`](https://bandit.readthedocs.io/en/latest/plugins/b612_logging_config_insecure_listen.html) - [x] `S701`: [`jinja2_autoescape_false`](https://bandit.readthedocs.io/en/latest/plugins/b701_jinja2_autoescape_false.html) - [x] `S702`: [`use_of_mako_templates`](https://bandit.readthedocs.io/en/latest/plugins/b702_use_of_mako_templates.html) - [ ] `S703`: [`django_mark_safe`](https://bandit.readthedocs.io/en/latest/plugins/b703_django_mark_safe.html)
S101:assert_usedS102:exec_usedS103:set_bad_file_permissionsS104:hardcoded_bind_all_interfacesS105:hardcoded_password_stringS106:hardcoded_password_funcargS107:hardcoded_password_defaultS108:hardcoded_tmp_directoryS109:password_config_option_not_marked_secretS110:try_except_passS111:execute_with_run_as_root_equals_trueS112:try_except_continueS113:request_without_timeoutS201:flask_debug_trueS202:tarfile_unsafe_membersS301:pickleS302:marshalS303:md5S304:ciphersS305:cipher_modesS306:mktemp_qS307:evalS308:mark_safeS311:randomS312:telnetlibS313:xml_bad_cElementTreeS314:xml_bad_ElementTreeS315:xml_bad_expatreaderS316:xml_bad_expatbuilderS317:xml_bad_saxS318:xml_bad_minidomS319:xml_bad_pulldomS320:xml_bad_etreeS321:ftplibS323:unverified_contextS324:hashlibS310:urllib_urlopenS401:import_telnetlibS402:import_ftplibS403:import_pickleS404:import_subprocessS405:import_xml_etreeS406:import_xml_saxS407:import_xml_expatS408:import_xml_minidomS409:import_xml_pulldomS410:import_lxmlS411:import_xmlrpclibS412:import_httpoxyS413:import_pycryptoS415:import_pyghmiS501:request_with_no_cert_validationS502:ssl_with_bad_versionS503:ssl_with_bad_defaultsS504:ssl_with_no_versionS505:weak_cryptographic_keyS506:yaml_loadS507:ssh_no_host_key_verificationS508:snmp_insecure_versionS509:snmp_weak_cryptographyS601:paramiko_callsS602:subprocess_popen_with_shell_equals_trueS603:subprocess_without_shell_equals_trueS604:any_other_function_with_shell_equals_trueS605:start_process_with_a_shellS606:start_process_with_no_shellS607:start_process_with_partial_pathS608:hardcoded_sql_expressionsS609:linux_commands_wildcard_injectionS610:django_extra_usedS611:django_rawsql_usedS612:logging_config_insecure_listenS701:jinja2_autoescape_falseS702:use_of_mako_templatesS703:django_mark_safe