Skip to content

Add bandit to pre-commit #144

Add bandit to pre-commit

Add bandit to pre-commit #144

Triggered via push November 8, 2023 19:43
Status Success
Total duration 26s
Artifacts 1

bandit.yml

on: push
Fit to window
Zoom out
Zoom in

Annotations

3 errors and 1 notice
Test: subprocess_popen_with_shell_equals_true id: B602: src/pas/plugins/oidc/locales/update.py#L41
subprocess call with shell=True identified, security issue. more info https://bandit.readthedocs.io/en/1.7.5/plugins/b602_subprocess_popen_with_shell_equals_true.html
Test: subprocess_popen_with_shell_equals_true id: B602: src/pas/plugins/oidc/locales/update.py#L50
subprocess call with shell=True identified, security issue. more info https://bandit.readthedocs.io/en/1.7.5/plugins/b602_subprocess_popen_with_shell_equals_true.html
Test: subprocess_popen_with_shell_equals_true id: B602: src/pas/plugins/oidc/locales/update.py#L58
subprocess call with shell=True identified, security issue. more info https://bandit.readthedocs.io/en/1.7.5/plugins/b602_subprocess_popen_with_shell_equals_true.html
Test: blacklist id: B404: src/pas/plugins/oidc/locales/update.py#L6
Consider possible security implications associated with the subprocess module. more info https://bandit.readthedocs.io/en/1.7.5/blacklists/blacklist_imports.html#b404-import-subprocess

Artifacts

Produced during runtime
Name Size
Security report Expired
2.34 KB