Bandit

Bandit is a lightweight static analysis tool that focuses on common security issues in Python code by scanning abstract syntax trees. It identifies risky usage patterns such as weak cryptography, insecure subprocess usage, and improper input handling. Bandit integrates into CI/CD pipelines to surface issues early in development and provides plugins for customization. While not a replacement for deeper code review, Bandit significantly reduces the time to detect common mistakes in Python projects. It is widely used by developers, security engineers, and automated pipelines to maintain code hygiene.