scanner-cli
scanner-cli copied to clipboard
python-bandit can't cope with many exclusions
Description
python-bandit is passed a list of all files to exclude. In my case that causes that module to fail with:
[error] python-bandit returned an error! spawn E2BIG
Which apparently means the argument list for the subprocess is too long.
Steps to Reproduce
- Create a directory
.venvwith ~6400 Python files in it*. - Run
hawkeye scan --exclude .venv
* This can happen if e.g. your virtual environment directory or build directory are in the project directory.
Expected behavior: python-bandit should run.
Actual behavior: python-bandit fails with the error [error] python-bandit returned an error! spawn E2BIG
Version
Hawkeye v1.7.1 Python-bandit 1.6.2
Additional Information
Issue seems to be how the command is constructed on python-bandit/index.js:28.