# core/adapters/tool.bandit.adapter.ts

> 29 lines of code and 7 definitions.

Tree: GovLab Quality
Language: typescript
Layer: infrastructure
Canonical: https://banes-lab.com/anatomy/quality#file-quality-core-adapters-tool-bandit-adapter-ts
Source text: https://banes-lab.com/source/quality/core/adapters/tool.bandit.adapter.ts.txt

Listed in [core/adapters](https://banes-lab.com/api/source/quality/core/adapters.md), after [core/adapters/tool.adapter.ts](https://banes-lab.com/source/quality/core/adapters/tool.adapter.ts.md) and before [core/adapters/tool.brakeman.adapter.ts](https://banes-lab.com/source/quality/core/adapters/tool.brakeman.adapter.ts.md).

## Definitions

- `runBandit` (lexical_declaration, line 15)
- `TOOL` (lexical_declaration, line 12)
- `DEFAULTS` (lexical_declaration, line 13)
- `{ command }` (lexical_declaration, line 16)
- `{ bin, prefix }` (lexical_declaration, line 17)
- `advisory` (lexical_declaration, line 18)
- `spec` (lexical_declaration, line 22)

## Contained in

- [core/adapters](https://banes-lab.com/anatomy/quality/folder-quality-core-adapters.md)

## Uses

- [core/adapters/tool.adapter.ts](https://banes-lab.com/source/quality/core/adapters/tool.adapter.ts.md)

## Linked from

- [core/adapters](https://banes-lab.com/anatomy/quality/folder-quality-core-adapters.md)

## Source

```typescript
import type { AdvisoryContext, RunnerContext } from "#types/tool.types";
import { scanTool, standardScan } from "#core/adapters/tool.adapter";
import { FINDING_STATUSES } from "#configuration/constants/tool.constants";
import type { RunResult } from "#types/finding.types";
import { commandHint } from "#configuration/strings/tool.strings";
import { commandOf } from "#core/lexers/invocation.lexer";
import { defineTool } from "#core/registries/tool.registry";
import { parseBanditOutput } from "#core/parsers/tool.bandit.parser";
import { toolAdvisory } from "#core/factories/tool.factory";
import { toolSetting } from "#core/resolvers/tool.resolver";

const TOOL = "bandit";
const DEFAULTS = { command: "python -m bandit" };

const runBandit = async function runBandit(context: RunnerContext): Promise<RunResult> {
    const { command } = await toolSetting(context.root, TOOL, DEFAULTS);
    const { bin, prefix } = commandOf(command, TOOL);
    const advisory: AdvisoryContext = {
        ...toolAdvisory(context, TOOL, commandHint(TOOL, bin)),
        failureSeverity: "error",
    };
    const spec = standardScan(advisory, FINDING_STATUSES, (result) =>
        parseBanditOutput(result.stdout, context.ecosystem),
    );
    return scanTool(
        advisory,
        { args: [...prefix, "-r", "-f", "json", ...context.paths], bin, cwd: context.root },
        spec,
    );
};

defineTool({ ecosystems: ["python"], run: runBandit, tool: TOOL });
```