INNER CODE UNIT · Python
security
redis/fastapi-redis-sdk · noxfile.py:68
def security(session: nox.Session) -> None:
"""Run bandit security scanner."""
uv_sync(session, "--only-group", "security")
# JSON report for CI artifact upload (non-fatal); text report (fatal).
session.run(
"bandit", "-r", "src/",
"-f", "json", "-o", "bandit-report.json",
success_codes=[0, 1],
)
session.run("bandit", "-r", "src/")
# ---------------------------------------------------------------------------
# Tests
# ---------------------------------------------------------------------------
# Integration tests alone cover ~78% of src/ - they exercise the library
# end-to-end rather than exhaustively, so the global --cov-fail-under=80 in
# pyproject.toml does not apply to them. 70 leaves headroom while still