Add bandit python code checks

[JC-wk]

Describe the solution you'd like
Add Bandit code checks to the PR validation process to ensure the code is secure

Describe alternatives you've considered
Other similar checkers

Additional context
Bandit has been able to highlight multiple issues in the codebase including security issues
I'd suggest skipping the "tests" directories with these tests to avoid noise

I run bandit manually by creating a pyproject.toml file as follows

[tool.bandit]
exclude_dirs = ['api_app/tests_ma','airlock_processor/tests', 'airlock_processor/.venv','resource_processor/tests_rp', 'e2e_tests', 'docs']

bandit -c ./pyproject.toml -r ./

[CodeVishal-17]

Hi @JC-wk, I’d be happy to work on this if it’s still open.

I can add Bandit to the PR validation pipeline using the suggested configuration, skip test directories to reduce noise, and wire it into the existing CI workflow.

Let me know if that sounds good and I’ll open a PR. Thanks!

[JC-wk]

you could try it out on a pipeline in your fork first and see how you get on, as we won't have permissions to run any pipelines in this repo.