chill out bandit

Author: irvingpop

.github/workflows/ci.yml

@@ -159,10 +159,10 @@ jobs:
         run: poetry install --no-interaction
 
       - name: Run Bandit security linter
-        run: poetry run bandit -r src --skip B101 -f json -o bandit-report.json || true
+        run: poetry run bandit -r src --skip B101 --severity-level high -f json -o bandit-report.json || true
 
       - name: Display Bandit results
-        run: poetry run bandit -r src --skip B101 -f txt || true
+        run: poetry run bandit -r src --skip B101 --severity-level high -f txt || true
 
   # Final status check for branch protection
   ci-success:

Makefile

@@ -50,7 +50,7 @@ test-cov:
 
 # Security
 security:
-	poetry run bandit -r src --skip B101 -f txt
+	poetry run bandit -r src --skip B101 --severity-level high -f txt
 
 # CI - runs all checks that CI will run
 ci: lint test-cov security