testing bandit scan config file

.github/workflows/bandit.yml

@@ -32,7 +32,7 @@ jobs:
       - name: Perform Bandit Analysis
         uses: PyCQA/bandit-action@v1
         with:
-          configfile: 'DEFAULT'
+          configfile: 'pre_commit.toml'
           profile: 'DEFAULT'
           tests: 'DEFAULT'
           skips: 'DEFAULT'

pre_commit.toml

@@ -0,0 +1,17 @@
+[tool.bandit]
+# Exclude specific directories or files from the scan
+exclude = ["docs/"]
+
+# Specify the test IDs to be skipped
+skips = [
+    "B323",  # _create_unverified_context
+    "B314",  # xml.etree.ElementTree.parse
+    "B404",  # subprocess module
+    "B405",  # xml.etree.ElementTree
+    "B311",  # Standard pseudo-random generators
+    "B403"   # pickle module
+]
+
+# Set the severity and confidence levels
+severity = "LOW"
+confidence = "HIGH"