--config pyproject.toml gives "expected '<document start>', but found '<scalar>'"

[Torxed]

Describe the bug

I've got the following pyproject.toml file:

[build-system]
requires = ["flit_core >=2,<4"]
build-backend = "flit_core.buildapi"

....

[tool.bandit]
targets = ["ourkvm"]
exclude = ["/tests"]

Which errors out when running bandit:

[Torxed@Laptop Project]$ bandit --config pyproject.toml -r src/
[config]	ERROR	expected '<document start>', but found '<scalar>'
  in "pyproject.toml", line 2, column 1
[main]	ERROR	pyproject.toml : Error parsing file.

And if I read the config parser code correctly, this should trigger this block: https://github.com/orsinium-forks/bandit/blob/d8fce0dcd84b2b1aca7d2be8d469458ea83c0bbe/bandit/core/config.py#L39-L46

If I put a comment on line 2, it complains on line 3, and so on.
And I can't say it's a problem with toml reading the file either:

Python 3.10.1 (main, Dec 18 2021, 23:53:45) [GCC 11.1.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import toml
>>> with open('pyproject.toml', 'r') as fh:
...     data = toml.load(fh)
...
>>> data['tool']['bandit']
{'targets': ['src'], 'exclude': ['/tests']}

Is this a Python 3.10 issue?

Bandit version

1.7.0 (Default)

Python version

3.9 (Default)

Additional context

Python 3.10, not python 3.9

[mrkovalchuk]

Hi! As I can see, pyproject.toml support was not included in 1.7.0 version. Relevant MR was merged last year august: #401

[Torxed]

Hi! As I can see, pyproject.toml support was not included in 1.7.0 version. Relevant MR was merged last year august: #401

Ah, I just took for granted that Bandit was updated at least within a year or so.
But I now see that the latest stable release was Dec 13, 2020.

Looks like the latest changes in master is becoming pretty big, is there any plans on releasing v1.7.1 ish soon? Would be nice to include bandit in some projects but I'd like to avoid having different .ini files.

[mrkovalchuk]

I am so sorry! 1.7.1 has been released! #758 Try to upgrade.

It was as a surprise to me =)

[Torxed]

Ah, yesterday as well heh.
I'm sure that solves it otherwise I'll re-open this. (accidental re-open)