I just installed this extension in vscode but nothing happens...

[mgarbade]

I'm not sure what I'm supposed to do?
Care about adding some how to get started for the vscode extension?

Also the {} icon at the bottom seems not to have anything "bandit-related"

I can run bandit from the command line after pip installing it. but this is probably nothing to do with this extension...

[ericwb]

Thanks for the feedback. I can certainly see how the current README isn't very informative. It was mostly a copy of the vscode extension template. I plan to improve it soon.

But basically, the extension runs Bandit to scan code for security issues. If it doesn't find any, you won't see any problems. If you'd like to sanity check the extension you can git clone https://github.com/PyCQA/bandit and open files in the examples/ directory. You should see indications problems in the code in the VS Code UI.

[mgarbade]

cloned the repository but nothing is marked in the examples folder...

on another ubuntu machine I got a squiggly red line from bandit once, there I also apt installed bandit ontop of the vscode extension.

So current working hypothesis is, that I need to apt install bandit before installing this vscode extension

Here is a bandit error from the current machine (no apt bandit):