diff --git a/templates/gitlab-ci-python.yml b/templates/gitlab-ci-python.yml index fad409612f7aeb2296f66d565cffc42ad04c6b34..f428f6da42eb82e6b50da750f4db10b2689ce624 100644 --- a/templates/gitlab-ci-python.yml +++ b/templates/gitlab-ci-python.yml @@ -1221,15 +1221,15 @@ py-bandit: - | if [[ "$SONAR_HOST_URL" ]] then - _run bandit ${TRACE+--verbose} --exit-zero --exclude ./.cache --exclude ./.venv --format csv --output reports/py-bandit.bandit.csv ${BANDIT_ARGS} + _run bandit ${TRACE+--verbose} --exit-zero --exclude ./.cache,./.venv --format csv --output reports/py-bandit.bandit.csv ${BANDIT_ARGS} fi # JSON (for DefectDojo) - | if [[ "$DEFECTDOJO_BANDIT_REPORTS" ]] then - _run bandit ${TRACE+--verbose} --exit-zero --exclude ./.cache --exclude ./.venv --format json --output reports/py-bandit.bandit.json ${BANDIT_ARGS} + _run bandit ${TRACE+--verbose} --exit-zero --exclude ./.cache,./.venv --format json --output reports/py-bandit.bandit.json ${BANDIT_ARGS} fi - - _run bandit ${TRACE+--verbose} --exclude ./.cache --exclude ./.venv ${BANDIT_ARGS} + - _run bandit ${TRACE+--verbose} --exclude ./.cache,./.venv ${BANDIT_ARGS} artifacts: when: always name: "$CI_JOB_NAME artifacts from $CI_PROJECT_NAME on $CI_COMMIT_REF_SLUG"