Qlty reports Bundit: B101 about testing code by default and unfairly holds Python developer's security scores back

[yukihiko-shinoda]

Problem statement

I already set following setting in my pyproject.toml but qlty doesn't respect pyoroject.toml:

[tool.bandit.assert_used]
skips = ["tests/*"]

Solution brainstorm (optional)

Following setting should be default for Python even if the project isn't checking in .qlty/qlty.toml:

# Ignore "Use of assert" rule in tests
[[ignore]]
rules = ["bandit:B101"]
file_patterns = ["tests/**"]