python3-bandit: upgrade 1.7.7 -> 1.7.8

Changelog:
============
-Incorrect tag naming in readme
-Utilize PyPI's trusted publishing
-Bump sigstore/cosign-installer from 3.3.0 to 3.4.0
-Add 1.7.7 to versions of bug template
-Use datetime to avoid updating copyright year
-filter data is safe for tarfile extractall
-Bump docker/setup-buildx-action from 3.0.0 to 3.1.0
-[B605] Add functions that are vulnerable to shell injection
-Add a SARIF output formatter

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>

1 files changed, 19 insertions, 0 deletions

diff --git a/meta-python/recipes-devtools/python/python3-bandit_1.7.8.bb b/meta-python/recipes-devtools/python/python3-bandit_1.7.8.bb
new file mode 100644
index 0000000000..8b0968857f
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-bandit_1.7.8.bb
@@ -0,0 +1,19 @@
+SUMMARY = "Security oriented static analyser for python code."
+LICENSE = "Apache-2.0"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=34400b68072d710fecd0a2940a0d1658"
+
+SRC_URI[sha256sum] = "36de50f720856ab24a24dbaa5fee2c66050ed97c1477e0a1159deab1775eab6b"
+
+DEPENDS = "python3-pbr-native python3-git python3-pbr python3-pyyaml python3-six python3-stevedore"
+
+inherit setuptools3 pypi
+
+RDEPENDS:${PN} += "\
+        python3-git \
+        python3-modules \
+        python3-pbr \
+        python3-pyyaml \
+        python3-rich \
+        python3-six \
+        python3-stevedore \
+        "