[TS-634] [BUG] .bandit file is used as config, should be ini

[jkowalleck]

observed

If .bandit file is found, it is run with bandit -c .bandit. (see above)
This is wrong.

expected

.bandit file is expected to be in INI format and must be run with bandit --ini .bandit.

https://bandit.readthedocs.io/en/latest/config.html#

To use this, put an INI file named .bandit in your project’s directory. [...]

contact

codacy-bandit/src/main/scala/codacy/bandit/Bandit.scala

Line 35 in ab42bad

private lazy val nativeConfigFileNames = Set("bandit.yml", ".bandit")

BTW: the bandit.yml is a config, not an INI, and is correctly called with bandit -c bandit.yml

[github-actions]

Internal ticket created : TS-634

[jkowalleck]

impact:
.bandit file is in INI format.
if this file is loaded via -c instead of --ini, then bandit crashes, causing your docker image to crash on runtime.

[jkowalleck]

possible fix: #63