mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-27 23:47:46 +00:00
chore: Move config files to proper locations
Moved: - ATTRIBUTION.md → docs/ - .bandit.yml → constraints/ - data_config.yaml → constraints/ Removed: - selector.log (generated log file) Root directory: 29 files → 26 files (only essentials)
This commit is contained in:
-24
@@ -1,24 +0,0 @@
|
||||
# Bandit Security Scanner Configuration
|
||||
# Documentation: https://bandit.readthedocs.io/
|
||||
|
||||
title: Bandit Security Scan for Predix
|
||||
|
||||
# Tests to skip (known false positives or acceptable risks)
|
||||
skips:
|
||||
- B101 # assert_used (asserts are OK in non-production code)
|
||||
- B602 # subprocess_popen_with_shell_equals_true (known issue, will fix separately)
|
||||
- B701 # jinja2_autoescape_false (false positive - code templates, not HTML)
|
||||
- B301 # pickle (known usage for internal data, will audit separately)
|
||||
- B108 # hardcoded_tmp_directory (internal tool)
|
||||
- B615 # huggingface_unsafe_download (will audit separately)
|
||||
- B307 # eval usage (will audit separately)
|
||||
- B614 # pytorch_load (internal benchmark code)
|
||||
- B104 # hardcoded_bind_all_interfaces (internal tool, localhost only)
|
||||
- B310 # urllib_urlopen (internal API calls)
|
||||
|
||||
# Minimum severity to report (LOW, MEDIUM, HIGH)
|
||||
# Pre-commit only warns on MEDIUM, blocks on HIGH
|
||||
severity_level: HIGH
|
||||
|
||||
# Minimum confidence level (LOW, MEDIUM, HIGH)
|
||||
confidence_level: MEDIUM
|
||||
Reference in New Issue
Block a user