Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Skip new bandit checks B113, B603, and B607 #759

Merged
merged 1 commit into from
Mar 16, 2023
Merged

Conversation

simu
Copy link
Member

@simu simu commented Mar 16, 2023

We currently skip the following bandit checks to allow PRs to be merged

  • B113: Requests call without timeout
  • B603: subprocess call - check for execution of untrusted input.
  • B607: Starting a process with a partial executable path

We'll address the lints in #758

Checklist

  • Keep pull requests small so they can be easily reviewed.
  • Categorize the PR by setting a good title and adding one of the labels:
    bug, enhancement, documentation, change, breaking, dependency, internal
    as they show up in the changelog
  • Link this PR to related issues.

We currently skip the following bandit checks to allow PRs to be merged

* B113: Requests call without timeout
* B603: subprocess call - check for execution of untrusted input.
* B607: Starting a process with a partial executable path

We'll address the lints in #758
@simu simu added the ignore Ignore PR in changelog label Mar 16, 2023
@simu simu requested a review from a team as a code owner March 16, 2023 14:54
@simu simu merged commit 28f5e1c into master Mar 16, 2023
@simu simu deleted the bandit-skip-checks branch March 16, 2023 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ignore Ignore PR in changelog
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants