--confidence should accept a value: LOW, MEDIUM, HIGH.

[JulienPalard]

I find it strange that --confidence has acount="count", I don't want to have:

bandit --confidence --confidence --confidence

It make no sense to the reader and even perturbs users: #178

I think of an enhancement: we could move -i and --confidence in two distinct arguments, mutually exclusive, allowing either -iii or --confidence HIGH.

On command like I'll always prefer -iii but in a file, say a tox.ini, I'd prefer writing down the whole thing: --confidence=HIGH to save the reader a round-trip to the doc.

Obviously It'll be non-retro-compatible with users already using bandit --confidence. Breaking user experience is bad, but I think we can do it step by step to avoid hard breakages.

What do you think?

[ericwb]

I transferred this idea to a new enhancement issue here: #772

[ericwb]

There already exists an argument to indicate confidence level by high, medium, low, or all.

  --confidence-level {all,low,medium,high}
                        report only issues of a given confidence level or higher. "all" and "low" are likely to
                        produce the same results, but it is possible for rules to be undefined which will not be
                        listed in "low".

[JulienPalard]

Nice!