A deliberately crafted Python repository with various code issues to test static code analysis and security scanning tools.
This repository contains Python code examples that demonstrate various types of issues that can be detected by static code analysis and security scanning tools, such as SonarQube, Snyk, and SOOS. The code is intentionally written with problems to trigger different types of warnings, errors, and quality issues.
- Complex functions with high cyclomatic complexity
- Inconsistent naming conventions
- Dead code and unused variables
- Hardcoded values and magic numbers
- Off-by-one errors in array indexing
- Resource leaks (unclosed files, connections)
- Improper exception handling
- Mutable default arguments
- SQL injection examples
- Command injection vulnerabilities
- Insecure cryptographic implementations
- Hardcoded credentials
- CI/CD Supply chain vulnerabilities
- Similar functions with minor variations
- Repeated code patterns
- Deeply nested conditional statements
- Long methods with too many responsibilities
𝅘𝅥𝅮I Bad project music (https://www.youtube.com/watch?v=Fl4L4M8m4d0)