Coverity has a static analysis tool (Prevent) which is similar to Klocwork. They run their tool on the Python source code (SVN head) on a daily basis. The results are ...
Running bandit and pip-audit directly — or using the official focused actions (PyCQA/bandit-action and pypa/gh-action-pip-audit) — is a reasonable and common approach. Those tools and actions are fine ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results