Comma separated exclude paths not honored

[Abel Lopez]

in a .bandit file, setting multiple exclude: paths doesn't work

[bandit]
exclude: /src/tests,/src/docs

This will exclude the /src/tests directory, but not the /src/docs dir.

Including multiple exclude lines has 'last one wins'

[bandit]
exclude: /src/tests
exclude: /src/docs

This will exclude the /src/docs directory, but not /src/tests

[Charles Crouch (ccrouch)]

From https://github.com/openstack/bandit/blob/e40af23ff67fc89f024c5a73f93c8d9a0b43caa3/README.rst#per-project-command-line-args

it says "The currently supported arguments are: exclude: comma separated list of excluded paths"

So something definitely looks broken here.

[Abel Lopez (al592b)]

Not a bug, misused tool in local environment