pin bandit<1.8, many false-positive issues (relates to PyCQA/bandit#1226

, PyCQA/bandit#1227)
crim-ca · Jan 28, 2025 · 0395d6a · 0395d6a
1 parent 9422e95
commit 0395d6a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/requirements-dev.txt b/requirements-dev.txt
@@ -4,7 +4,10 @@
 # pylint>=2.5 requires astroid>=2.4
 # install/update sometime fails randomly, so enforce it
 astroid
-bandit
+# pin bandit, many issues in latest versions
+# - https://github.com/PyCQA/bandit/issues/1226
+# - https://github.com/PyCQA/bandit/issues/1227
+bandit<1.8
 bump2version
 codacy-coverage
 coverage