Disable Python bandit errors in own Mega-Linter

Author: nvuillam

.mega-linter.yml

@@ -22,6 +22,7 @@ MARKDOWN_FILTER_REGEX_EXCLUDE: '(license\.md)'
 MARKDOWN_MARKDOWN_LINK_CHECK_DISABLE_ERRORS: true
 SPELL_MISSPELL_FILTER_REGEX_EXCLUDE: '(\.automation/generated|docs/descriptors)'
 DOCKERFILE_HADOLINT_ARGUMENTS: "--ignore DL3003 --ignore DL3007 --ignore DL3013 --ignore DL3016 --ignore DL3018 --ignore DL3028 --ignore DL4001 --ignore DL4006 --ignore SC2015 --ignore SC2016 --ignore SC2039 --ignore SC2086 --ignore SC1091"
+PYTHON_BANDIT_DISABLE_ERRORS: true
 SHOW_ELAPSED_TIME: true
 EMAIL_REPORTER_EMAIL: [email protected]
 FILEIO_REPORTER: true

megalinter/descriptors/python.megalinter-descriptor.yml

@@ -170,6 +170,10 @@ linters:
   # BANDIT
   - linter_name: bandit
     name: PYTHON_BANDIT
+    linter_text: |
+      bandit checks for security risks
+
+      If you find it too harsh, you may define `PYTHON_BANDIT_DISABLE_ERRORS: true` in your .mega-linter.yml config file
     linter_url: https://bandit.readthedocs.io/en/latest/
     linter_repo: https://github.com/PyCQA/bandit
     linter_rules_url: https://bandit.readthedocs.io/en/latest/plugins/index.html#complete-test-plugin-listing