bandit: ignore the tests

Author: mr-c

pyproject.toml

@@ -143,3 +143,6 @@ ignore = [
   "D203",
   "D212",
 ]
+
+[tool.bandit]
+exclude_dirs = ["cwl_utils/tests"]

tox.ini

@@ -31,7 +31,7 @@ passenv =
   GITHUB_*
 deps =
   py3{10,11,12,13,14}-lint: -rlint-requirements.txt
-  py3{10,11,12,13,14}-bandit: bandit
+  py3{10,11,12,13,14}-bandit: bandit[toml]
   py3{10,11,12,13,14}-mypy: -rmypy-requirements.txt
 
 setenv =
@@ -40,7 +40,7 @@ setenv =
 commands =
   py3{10,11,12,13,14}-unit: python -m pip install -U pip setuptools wheel
   py3{10,11,12,13,14}-unit: make coverage-report coverage.xml PYTEST_EXTRA={posargs}
-  py3{10,11,12,13,14}-bandit: bandit --recursive cwl_utils
+  py3{10,11,12,13,14}-bandit: bandit --configfile pyproject.toml --recursive cwl_utils
   py3{10,11,12,13,14}-lint: make flake8
   py3{10,11,12,13,14}-lint: make format-check
   py3{10,11,12,13,14}-mypy: make mypy