`bandit` is a fast Python vulnerability scanner, this provides a default configuration file for it for those that want to run it. `bandit --ini .bandit -r osbuild/` will get you results.