.bandit.yml

skips:
- B101  # Ignore defensive `assert`s (especially useful for mypy)
- B404  # Ignore warnings about importing subprocess
- B603  # Ignore warnings about calling subprocess.Popen without shell=True
- B607  # Ignore warnings about calling subprocess.Popen without a full path to executable