gistfile1.txt

$ bandit -x ./.venv,./tests -r .
[main]	INFO	profile include tests: None
[main]	INFO	profile exclude tests: None
[main]	INFO	cli include tests: None
[main]	INFO	cli exclude tests: None
[main]	INFO	running on Python 3.7.6
Run started:2020-01-07 16:40:42.356244

Test results:
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'django.contrib.auth.password_validation'
   Severity: Low   Confidence: Medium
   Location: ./server/settings/environments/production.py:29
   More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html
28	
29	_PASS = "django.contrib.auth.password_validation"  # noqa: S105
30	AUTH_PASSWORD_VALIDATORS = [

--------------------------------------------------

Code scanned:
	Total lines of code: 583
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0.0
		Low: 1.0
		Medium: 0.0
		High: 0.0
	Total issues (by confidence):
		Undefined: 0.0
		Low: 0.0
		Medium: 1.0
		High: 0.0
Files skipped (0):