3 Commits

Author	SHA1	Message	Date
TPTBusiness	f3a2e2b4f1	fix: Add Bandit security scanning and fix critical vulnerabilities ... - Add Bandit security scanner to requirements and pre-commit hooks - Fix CWE-22 path traversal in tarfile/zipfile extraction (3 files) * Add _safe_extract() validation in submit.py, env.py, kaggle_crawler.py * Prevents malicious archives from writing outside target directory - Fix MD5 hashlib calls with usedforsecurity=False flag (2 files) * submission_format_test.txt files for checksum validation - Configure .bandit.yml for automated security scanning * Skip known false positives: B602 (subprocess), B701 (Jinja2) - Add security runbook documentation in docs/security/ - Add pre-commit hook scripts for automated Bandit scanning All 106 backtesting and security tests pass. Security issues resolved: B201, B202, B324 (9 total fixes)	2026-04-03 11:55:05 +02:00
Linlang	571b5304cb	fix mypy error (#91) ... * fix mypy error * fix mypy error * fix ruff error * change command * delete python 3.8&3.9 from CI * change command * Some modifications according to the comments * Add literal type * Update .github/workflows/ci.yml * Some modifications according to the comments * fix ruff error * fix meta dict * Fix type * Some modifications according to the comments * merge latest code * Some modifications according to the comments * Some modifications according to the comments * fix ci error * fix ruff error * Update Makefile * Update Makefile --------- Co-authored-by: Ubuntu <debug@debug.qjtqi00gqezu1eqs55bqdrf51f.px.internal.cloudapp.net> Co-authored-by: Young <afe.young@gmail.com> Co-authored-by: you-n-g <you-n-g@users.noreply.github.com>	2024-07-25 15:20:04 +08:00
Xu Yang	02173ffdcc	add code security check CI and dependbot (#3) ... * update code * init structure * add requirements and fix CI --------- Co-authored-by: xuyang1 <xuyang1@microsoft.com>	2024-05-09 10:35:54 +08:00