Bandit is a static analysis tool that scans Python code for common security vulnerabilities and dangerous coding patterns. Developers use it to identify potential security issues in their codebase before deployment, such as hardcoded passwords, insecure cryptography usage, and SQL injection risks. It integrates into development workflows and CI/CD pipelines to catch security problems early.

PyCQA