# Bandit YAML configuration
# https://bandit.readthedocs.io/en/latest/config.html

targets:
  - sunpal/

exclude_dirs:
  - tests
  - build
  - dist
  - .git

# Skip specific checks that produce false positives for HTTP client libraries:
# B105/B106/B107 - hardcoded password (API keys are passed at runtime, not hardcoded)
# B110       - try/except/pass (used legitimately in compat.py)
skips:
  - B105
  - B106
  - B107
  - B110
