• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

smithy-security / smithy
43%
main: 6%

Build:
Build:
LAST BUILD BRANCH: ptzianos/refactor-osv-scanner
DEFAULT BRANCH: main
Repo Added 21 Oct 2024 11:09AM UTC
Token dpdu6Vcj72k9ORfEzM24cfF6H5HN631Y0 regen
Build 1029 Last
Files 43
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH make-bandit-run
branch: make-bandit-run
CHANGE BRANCH
x
Reset
Sync Branches
  • make-bandit-run
  • 332-fix-pdf-consumer
  • 712-reachability-enricher-works-with-all-languages
  • SAAS-7606-osv-do-not-differentiate-between-empty-and-malformed-file
  • SAAS-7700-fix-abs-path-issue
  • SAAS-7700-update-sarif-package
  • SMITHY-540-codeql-node
  • SMITHY-639-update-checkov
  • SMITHY-642-improve-kics
  • SMITHY_539_fix-vendor-detection-in-reachability-enricher
  • add-component-release-channels
  • add-logging-to-image-metadata-get
  • add-metadata-publishing-to-image-get
  • add-metadata-to-scanners
  • add_soocon25_slides
  • allow-reporters-to-run-without-findings
  • andream16/OCU-223-local-example
  • andream16/OCU-254/register-and-run-components-v1
  • andream16/OCU-254/register-and-run-components-v2
  • andream16/OCU-472/basic-smithyctl-boilerplate
  • andream16/OCU-472/basic-smithyctl-boilerplate-and-cleanup
  • andream16/add-annotations
  • andream16/adding-attr-to-exploitability-enrichment
  • andream16/adding-ocsf-ext
  • andream16/automigrate-on-sqlite
  • andream16/bump-components-targets
  • andream16/bump-sarif-v0.0.4
  • andream16/bump-sdk
  • andream16/bump-sdk-0.0.7-alpha
  • andream16/bump-sdk-v0.0.3-alpha
  • andream16/bumping-deps
  • andream16/discord-improvements
  • andream16/dogfooding-duo
  • andream16/feature/OCU-471-build-execute
  • andream16/feature/dra-148-release-sarif-to-ocsf-package-and-update-dependant
  • andream16/feature/ocu-267-explore-go-enum-on-sdk
  • andream16/feature/ocu-268-replace-errors-and-fmterrorf-utilisations-for-go-errors-in
  • andream16/feature/ocu-421-jira-on-new-sdk-pt-1
  • andream16/feature/ocu-473-package--and-push-components-using-oras
  • andream16/feature/ocu-481-version-command
  • andream16/feature/saas-5016-as-a-smithy-engineer-i-want-to-extend-the-source-code
  • andream16/feature/saas-610-implement-findings-storage-gateway-reader-and-writer/pt-1
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-1
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-2
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-3
  • andream16/feature/saas-610/implement-findings-storage-gateway-reader-and-writer/pt-4
  • andream16/feature/smithy-556-linear-on-new-sdk
  • andream16/feature/smithy-573-output-gitdiff-file-with-diff-of-branch-or-pr-against-the
  • andream16/feature/user-98-rename-the-s3-target-to-source-code-artefact-and-extend-it
  • andream16/fix-bug-not-handling-prs-refs
  • andream16/fix-checkov-kics
  • andream16/fix-linear-base-url
  • andream16/fix-osv-scanner
  • andream16/fix-smithyctl-target
  • andream16/fix-typo-tf
  • andream16/fix-wrong-custom-annotation-enrichment
  • andream16/fixing-malformed-component-config
  • andream16/git-clone-component
  • andream16/go-sec-pipeline-components
  • andream16/hack-me
  • andream16/improve-local-golang-pipeline-example
  • andream16/jira-reporter-template
  • andream16/label
  • andream16/link-to-runs
  • andream16/lower-go-version-to-1.23
  • andream16/misc-fixes
  • andream16/pr-diff-enrichment
  • andream16/prefix-targets
  • andream16/prefix-targets-v2
  • andream16/refreshing-docs
  • andream16/removing-zap-with-orchestration-script
  • andream16/repackage-components
  • andream16/sdk-docs
  • andream16/simplify-git-clone-diff-reporting
  • andream16/stop-deleting-sqlite-db
  • andream16/test-gh
  • andream16/test-vuln
  • andream16/track-reachability-type
  • andream16/track-sdk-version
  • andream16/tweak-components-no-findings
  • andream16/unit-tests-jira-reporter
  • andream16/update-discord-link
  • andream16/update-docs
  • andream16/update-references-to-smithy
  • andream16/use-plain-http-setting-correctly
  • battlecard-reporter
  • better-issue-info
  • bugfix/453/investigate/dependency-check
  • bugfix/456/defectdojo-crashes-if-engagement-time-zero
  • bugfix/460/tfsec-parser
  • bugfix/component-description-fix
  • bugfix/component-descriptions
  • bugfix/pdf-consumer-fixes
  • bugfix/scorecard-producer
  • bugfix/trufflehog-missing-vendor-name-in-pr-commenter
  • bugifx/pdf-consumer-file-path
  • bugifx/pdf-format
  • bugifx/pdf-format-2
  • cdxgen-v1
  • checkov
  • close-713-port-reachability-to-new-sdk
  • codeql-javascript-own-container
  • codeql-producer
  • codeql-producer-compiled-languages
  • debug-jira
  • default-temp-dir
  • defectdojo-to-ocsf
  • elasticsearch-component-yaml
  • elasticsearch-to-new-sdk
  • elixir-sast
  • example-zap-with-script-orchestration
  • exploitability-enrichment
  • feature/440/changelog-utility
  • feature/PythonSDKsmithyctlreadme
  • feature/convert-pdf-consumer-to-new-sdk
  • feature/ocsf_tests_old_path
  • feature/ocu-221-implement-embedded-storage-backend-reader-and-writer
  • feature/ocu-221-implement-embedded-storage-backend-reader-and-writer-pt-2
  • feature/oscf_tests
  • feature/saas-604-switch-saas-to-use-oss-v1-data-types
  • filter_component
  • fix-SAAS-1025-bandit-explodes-with-line-ranges
  • fix-codeql-helm-template
  • fix-custom-annotaiton-enricher
  • fix-data-propagation-snyk
  • fix-flaky-zap-test
  • fix-pip-audit-experience
  • fix-readme
  • fix-revive-ignore-rules
  • fix-trufflehog
  • fix-zap-metadata-propagation
  • fix-zap-packaging
  • fix/semgrep-paths
  • fix_dev_components
  • github-link-enricher
  • hack-hack
  • image-go-getter
  • k8s-clientset-debug-log-object
  • kics
  • localfileloader-filepath
  • main
  • make-battlecard-actually-print-battlecard
  • make-pdf-reporter-upload-to-configurable-s3-backends
  • make-scanners-not-exit-on-0-findings
  • make-scanners-with-wrapped-tools-flat-dirs
  • make-slack-work-as-discord
  • make-snyk-producers-produce-at-least-an-empty-result
  • make-trivy-have-scanner-and-package
  • make-zap-wait-for-passive-scan
  • make-zaproxy-report-telemetry
  • minor-improvement-for-checkov
  • mobscan
  • mobsf
  • nancy-to-new-sdk
  • new_bandit_component
  • new_trufflehog_component
  • nits
  • nscuro-patch-1
  • opencreEnrichers
  • pip-safety-to-ocsf
  • pretty-results-printer
  • ptruscott/feature/data-enrichement-proto-messages
  • ptzianos-northdpole/extend-artefact-fetcher
  • ptzianos/add-labels-to-oci-packages-and-nits
  • ptzianos/add-make-targets-for-tags
  • ptzianos/add-more-docs
  • ptzianos/add-package-writing-permission
  • ptzianos/add-parameters-to-zap
  • ptzianos/add-values-to-enum
  • ptzianos/allow-component-params-with-no-value
  • ptzianos/allow-targets-to-propagate-metadata
  • ptzianos/bugfix-for-scanner-sdk
  • ptzianos/bugfix-stdout-report
  • ptzianos/build-images-with-smithyctl
  • ptzianos/cleanup-deprecated-components
  • ptzianos/cleanup-leftover-pipeline
  • ptzianos/cleanup-migrations
  • ptzianos/cleanup-some-refs
  • ptzianos/codeql-v0-sdk-fix
  • ptzianos/deprecate-git-clone-results
  • ptzianos/ensure-zap-results-have-guids
  • ptzianos/extend-data-source-proto
  • ptzianos/extend-ocsf-validation-helpers
  • ptzianos/extend-smithyctl-and-sdk-for-target-metadata-injection
  • ptzianos/filter-out-jira-investigated-findings
  • ptzianos/fix-component-image-pushing-and-docs
  • ptzianos/fix-component-path-publish-workflow
  • ptzianos/fix-container-generation-of-mobsf
  • ptzianos/fix-go-versions-and-action-caching
  • ptzianos/fix-gosec-params
  • ptzianos/fix-image-push-flag
  • ptzianos/fix-invocation-of-custom-image-targets
  • ptzianos/fix-make-target
  • ptzianos/fix-packaging-components
  • ptzianos/fix-parameter-types-typo
  • ptzianos/fix-path-reporting-of-zap
  • ptzianos/fix-permissions-for-proto-gen
  • ptzianos/fix-revive
  • ptzianos/fix-sdk-version-resolution
  • ptzianos/fix-typo-in-sdk
  • ptzianos/fix-version-tag-of-packaged-components
  • ptzianos/fix-workflow-run-build-labels
  • ptzianos/force-users-to-set-executable-paths
  • ptzianos/gha-producer-improvements
  • ptzianos/github-codeql-runner-fixes
  • ptzianos/improve-component-logging-output
  • ptzianos/improve-fmt-job
  • ptzianos/improve-sdk-ocsf-validation
  • ptzianos/improve-snyk-node-folder-discovery
  • ptzianos/improve-tagging-targets
  • ptzianos/imrpove-sdk-testing-utils
  • ptzianos/integrate-docker-creds-to-smithyctl
  • ptzianos/make-component-step-image-resolution-more-flexible
  • ptzianos/make-helpers-and-dependency-updates
  • ptzianos/minor-makefile-cleanup
  • ptzianos/ocu-502/allow-dynamic-volume-provisioning
  • ptzianos/ocu-503/build-component-helper-images
  • ptzianos/ocu-530/allow-git-clone-to-manage-pr-refs
  • ptzianos/package-and-release-smithyctl
  • ptzianos/pass-push-signal-to-custom-image-building
  • ptzianos/prevent-codeql-images-from-overwriting-each-other
  • ptzianos/push-auth-creds-to-custom-images
  • ptzianos/refactor-linters-to-catch-all-components
  • ptzianos/refactor-osv-scanner
  • ptzianos/refactor-workspaces
  • ptzianos/reintroduce-deduplication-db-migrations
  • ptzianos/reintroduce-scripts
  • ptzianos/reintroduce-third-party-scripts
  • ptzianos/remediation-enrichment-type
  • ptzianos/remove-tekton-from-clientset
  • ptzianos/remove-trufflehog-debug-echo
  • ptzianos/remove-unused-sobelow-var
  • ptzianos/sdk-updates-for-zap
  • ptzianos/simplify-git-clone-component
  • ptzianos/smithy-576/improve-zap-entrypoint-subprocess-management
  • ptzianos/smithy-582/print-error-stacktraces
  • ptzianos/smithy-612/batch-findings
  • ptzianos/smithy-614/paginate-everything
  • ptzianos/smithy-631/add-default-high-severity-to-trufflehog
  • ptzianos/smithyctl-dynamic-image-resolution
  • ptzianos/smithyctl-packaging-and-building-improvements
  • ptzianos/source-code-artefact/improve-target-metadata
  • ptzianos/trivy-finding-ids
  • ptzianos/update-all-components-to-sdk-v0.0.18-alpha
  • ptzianos/update-sdk-env-dep-to-v0.0.3
  • ptzianos/update-zap-sarif-to-ocsf-transformer
  • ptzianos/update-zap-sdk
  • ptzianos/update-zaproxy-sarif-transformer-library
  • ptzianos/update-zaproxy-sdk-to-v0.0.16
  • ptzianos/use-release-action-instead-of-artifact-upload
  • ptzianos/v1-sdk-components
  • refactor-zap-make-it-less-memory-hungry
  • remove-rules-silencing-zap
  • remove-unused-env-var
  • revampt-docs
  • saibamo-patch-1
  • saibamo/add-python-sdk-classes
  • saibamo/add-python-test-github-actions
  • saibamo/add_correct_install_python_sdk_readme
  • saibamo/add_new_enrichment_type_for_git_intel
  • saibamo/add_note_to_git_history_enrichment
  • saibamo/add_python_sdk_fix
  • saibamo/debug_python_sdk_grpc_problems
  • saibamo/fix_auto_proto_gen_python
  • saibamo/fix_git_dependencies_in_pyproject_toml_causing_errors
  • saibamo/fix_logger_error_in_enricher
  • saibamo/fix_readme
  • saibamo/improve_imports_python_sdk
  • scanner-mapping-instructions
  • semgrep-to-ocsf
  • semgrep-with-rules
  • senglezou/credo-improvements
  • senglezou/fix-sobelow-readme
  • senglezou/sobelow-improvements
  • set-target-type-trivy
  • set-vendor-info-for-vulnerabilities
  • slack-to-new-sdk
  • smithy-643-update-elasticsearch-client-version
  • snyk-proxy
  • snyk-sbom
  • sobelow-support-for-empty-findings
  • spain-2025-talks
  • status-investigation-protos
  • trivy-to-ocsf
  • unified-snyk
  • unify-code-ql
  • update-credo-sarif-pkg
  • update-credo-sobelow-components
  • update-credo-sobelow-components-2
  • update-make-file-to-work-on-macos-as-well
  • update-sobelow-to-supported-version
  • zap-browser-based-auth
  • zap-nit-make-unauthenticated-scan-more-verbose
  • zap-open-api
  • zap-to-ocsf
  • zap_orchestration_with_only_python

19 Mar 2025 09:56AM UTC coverage: 43.176%. Remained the same
13943682183

Pull #770

github

web-flow
Merge 9907a57b5 into 23b622d94
Pull Request #770: bandit example workflow and component.yaml

794 of 1839 relevant lines covered (43.18%)

1.77 hits per line

Relevant lines Covered
Build:
Build:
1839 RELEVANT LINES 794 COVERED LINES
1.77 HITS PER LINE
Source Files on make-bandit-run
  • Tree
  • List 21
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
13943682183 make-bandit-run Merge 9907a57b5 into 23b622d94 Pull #770 19 Mar 2025 10:10AM UTC web-flow github
43.18
13927234028 make-bandit-run Merge 94c33599f into 6d867608d Pull #770 18 Mar 2025 03:47PM UTC web-flow github
43.18
13908761198 make-bandit-run Merge 50b85a290 into 6d867608d Pull #770 17 Mar 2025 08:17PM UTC web-flow github
43.18
13873345249 make-bandit-run Merge 4f9a8a61c into 233bf4095 Pull #770 15 Mar 2025 01:32PM UTC web-flow github
40.96
See All Builds (1024)

Badge your Repo: smithy

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc