secure-python-pipeline-template/pyproject.toml at main · thunderstornX/secure-python-pipeline-template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
[build-system]
requires = ["setuptools>=68", "wheel"]
build-backend = "setuptools.build_meta"

[project]
name = "secure-python-pipeline-template"
version = "1.0.0"
description = "A four-gate DevSecOps pipeline template for Python projects (Semgrep + Trufflehog + Bandit + pip-audit)."
readme = "README.md"
requires-python = ">=3.10"
license = {text = "MIT"}
authors = [
    {name = "Ali Murtaza Bhutto", email = "alibhutto101112@gmail.com"},
]
keywords = [
    "DevSecOps",
    "CI/CD",
    "SAST",
    "Python",
    "GitHub Actions",
    "OWASP",
    "secure SDLC",
]
classifiers = [
    "Development Status :: 5 - Production/Stable",
    "Intended Audience :: Developers",
    "Intended Audience :: Information Technology",
    "License :: OSI Approved :: MIT License",
    "Operating System :: POSIX :: Linux",
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Topic :: Security",
    "Topic :: Software Development :: Quality Assurance",
]
dependencies = [
    "bandit>=1.8",
    "pip-audit>=2.10",
]

[project.optional-dependencies]
example = [
    "fastapi>=0.136",
    "uvicorn[standard]>=0.32",
    "pydantic>=2.10",
    "pydantic-settings>=2.7",
    "bcrypt>=4.2",
    "python-multipart>=0.0.27",
    "email-validator>=2.2",
]
dev = [
    "pytest>=9.0",
    "pytest-asyncio>=1.3",
    "httpx>=0.28",
    "anyio>=4.7",
]

[project.urls]
Repository = "https://github.com/thunderstornX/secure-python-pipeline-template"
Issues = "https://github.com/thunderstornX/secure-python-pipeline-template/issues"

[tool.bandit]
# Bandit configuration; see also bandit.yml at repo root for the canonical config.
exclude_dirs = ["tests", "eval/cloned_repos", ".venv"]

[tool.pytest.ini_options]
testpaths = ["example-project/tests"]
python_files = "test_*.py"
asyncio_mode = "auto"