set -e

if [ $(basename $(pwd)) != $(basename $(git rev-parse --show-toplevel)) ]; then

echo "Run this from the root directory of the Benchmark."

exit 1

if [ ! -d venv ]; then

echo "Creating python venv..."

python3 -m venv venv

if [ -n ${VIRTUAL_ENV} ]; then

source venv/bin/activate

ENTERED_VENV=y

pip install bandit[sarif] -q

bandit -x "./venv" -f sarif -r . -o results/BenchmarkPython-Bandit.sarif

if [ -v ENTERED_VENV ]; then

deactivate