Static Code Analysis with Python
summary
Demonstrates concrete tools and results: Prospector aggregates pep8 flake8 pyflakes vulture and more and scans a 400,000‑line codebase in about 15 seconds, revealing roughly a thousand violations; Bandit locates hardcoded passwords, pickle/XML deserialization issues, shell and SQL injection patterns and reports severity plus confidence; shows easy pip install, CI integration, writing checks against Python’s ast, and using mypy type hints to enable stronger static checks and test generation.
AI-written summary · about
chapters (12)
- 0:00Introduction and goals
- 0:58What is static analysis
- 1:41Benefits of static analysis
- 2:59Types of analysis
- 3:42Limitations and pitfalls
- 4:55Tooling overview
- 5:56Demonstrating prospector
- 9:38Security analysis with Bandit
- 12:28IDE integration
- 14:17Advanced tools and typing
- 17:37Next steps and conclusion
- 18:47Q&A session
related talks
39mPractical Static Analysis for Continuous Application Security
27mAn Overview of the Python Code Tool Landscape 2023
45mTest-Driven Development of a Static Code Analyzer in Python
29mCode Quality in Python - tools and reasons
54mA Shock to the System Static Analysis for Real AppSec
07mChoose Wisely: Code Smells in Automatically Generated Code
28mSecuring Code with the Python Type System
44mAn intro to improving the security of your code with free analysis tools