Forcing bandit exit 0

loadsmart · Feb 1, 2021 · b71b461 · b71b461
1 parent 4a9d495
commit b71b461
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/docker/sast-check.sh b/docker/sast-check.sh
@@ -1,12 +1,12 @@
-#!/bin/sh -x
+#!/bin/sh
 
 export NOW="$(date +%s)"
 TMP_REPORT="$(mktemp)"
 
 # Run Bandit and save report on temporary folder
 set -euo pipefail
 bandit --version
-bandit -r -a vuln -ii -ll -x .git,.svn,.mvn,.idea,dist,bin,obj,backup,docs,tests,test,tmp,reports,venv "$@" -f json -o report.json
+bandit -r -a vuln -ii -ll -x .git,.svn,.mvn,.idea,dist,bin,obj,backup,docs,tests,test,tmp,reports,venv "$@" -f json -o "${TMP_REPORT}" --exit-zero
 
 # EXITCODE=$?
 # RESULT="${RESULT//'%'/'%25'}"
@@ -16,8 +16,7 @@ bandit -r -a vuln -ii -ll -x .git,.svn,.mvn,.idea,dist,bin,obj,backup,docs,tests
 # echo "${EXITCODE}"
 
 # Print Report on screen to developers
-# cat "${TMP_REPORT}"
-cat report.json
+cat "${TMP_REPORT}"
 
 if [ -z ${DD_CLIENT_API_KEY} ] || [ -z ${GITHUB_REPOSITORY} ]
 then
@@ -113,5 +112,4 @@ EOF
 fi
 
 # Removing temporary files
-#rm -rf "${TMP_REPORT}"
-rm -rf report.json
+rm -rf "${TMP_REPORT}"