GRM-24: docs: document bandit in README, CONTRIBUTING and .gitignore

This commit is contained in:
Emil Simeonov
2026-06-19 21:13:58 +02:00
parent ae27417a5f
commit d8c31238bd
3 changed files with 11 additions and 3 deletions
+3 -1
View File
@@ -43,7 +43,8 @@ This format is enforced by the auto-merge workflow, which validates the PR title
```bash
make test-all # Runs pytest-cov + molecule
make lint-all # Runs ruff, pyright, ansible-lint, checkmake
make lint-all # Runs ruff, pyright, bandit, ansible-lint, checkmake
make lint-bandit # Security scan with bandit
make pytest-cov # Unit tests with 100% coverage enforcement
make molecule # All 7 molecule scenarios
```
@@ -52,5 +53,6 @@ make molecule # All 7 molecule scenarios
- **ruff**: Line length 120
- **pyright**: Strict mode
- **bandit**: Security scan for Python code (no high/medium severity issues)
- **Test coverage**: 100% required
- **ansible-lint**: For all Ansible content