run bandit without -r . based on targets in config files

[kiraware]

Let's say we have this pyproject.toml. I wish bandit could run this command bandit -c pyproject.toml and just look at the src directory in the targets configuration.

[tool.bandit]
targets = ["src"]

Why i need this?

bandit is run using the -r . command like this bandit -c pyproject.toml -r .. The problem with this command is that bandit will only search the current directory and ignore the targets configuration making the configuration useless. In fact bandit looks the entire directory including venv, src, tests, etc.

I had to change the configuration to ignore folders that shouldn't be scanned by bandit

[tool.bandit]
exclude_dirs = ["venv", "tests", "etc"]

I think making bandit read the targets configuration for the scan directory is more elegant and makes the command shorter like this bandit -c pyproject.toml