31 lines
524 B
Markdown
31 lines
524 B
Markdown
|
---
|
||
|
|
paths:
|
||
|
|
- "**/*.py"
|
||
|
|
- "**/*.pyi"
|
||
|
|
---
|
||
|
|
# Python Security
|
||
|
|
|
||
|
|
> This file extends [common/security.md](../common/security.md) with Python specific content.
|
||
|
|
|
||
|
|
## Secret Management
|
||
|
|
|
||
|
|
```python
|
||
|
|
import os
|
||
|
|
from dotenv import load_dotenv
|
||
|
|
|
||
|
|
load_dotenv()
|
||
|
|
|
||
|
|
api_key = os.environ["OPENAI_API_KEY"] # Raises KeyError if missing
|
||
|
|
```
|
||
|
|
|
||
|
|
## Security Scanning
|
||
|
|
|
||
|
|
- Use **bandit** for static security analysis:
|
||
|
|
```bash
|
||
|
|
bandit -r src/
|
||
|
|
```
|
||
|
|
|
||
|
|
## Reference
|
||
|
|
|
||
|
|
See skill: `django-security` for Django-specific security guidelines (if applicable).
|