Commit Graph

15 Commits

Author SHA1 Message Date
TPTBusiness b5fb769b9c fix(security): add logging to all except/pass blocks (B110) 2026-04-29 18:38:19 +02:00
TPTBusiness 3b63913038 fix(security): add nosec for torch.load (B614 #727) 2026-04-29 17:55:17 +02:00
TPTBusiness 6667170b7d fix(security): add nosec for torch.load (B614 #728) 2026-04-29 17:52:25 +02:00
TPTBusiness 52aee3556c fix(security): add nosec for torch.load (B614 #729) 2026-04-29 17:50:06 +02:00
TPTBusiness eb8588cbaf fix(security): add nosec for torch.load (B614 #730) 2026-04-29 17:47:20 +02:00
TPTBusiness 2a282d18b7 fix(security): add nosec for torch.load (B614 #731) 2026-04-29 17:44:29 +02:00
TPTBusiness 2d0f33316c fix(security): add nosec for torch.load (B614 #732) 2026-04-29 17:41:35 +02:00
TPTBusiness 612428f217 fix(security): add nosec for torch.load (B614 #733) 2026-04-29 17:37:38 +02:00
TPTBusiness 9ecbebe572 fix(security): add nosec for torch.load (B614 #734) 2026-04-29 17:31:05 +02:00
TPTBusiness ee29ed2368 fix(security): add nosec for torch.load (B614 #735) 2026-04-29 17:27:53 +02:00
TPTBusiness ee24b61534 fix(security): add nosec for torch.load (B614 #736) 2026-04-29 17:26:06 +02:00
TPTBusiness f3853c30da fix(security): add nosec for torch.load (B614 #737) 2026-04-29 17:24:15 +02:00
TPTBusiness fa7964594d fix(security): add nosec for torch.load (B614 #738) 2026-04-29 17:21:40 +02:00
TPTBusiness 5d8e53d208 fix(security): resolve all 30 Bandit security alerts (B301, B614, B104)
- B301 (pickle): add nosec B301 to pd.read_pickle calls in Kaggle templates
  — files are trusted Kaggle-environment inputs, not user-supplied
- B614 (torch.load): add weights_only=True to all torch.load calls in
  model benchmark GT code and gt_code.py
- B104 (binding 0.0.0.0): change run_server and CLI default to 127.0.0.1;
  add nosec comment where all-interface binding is required for Docker

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 22:24:57 +02:00
Xu Yang 1d9b4cd2ec Align factor coder into new framework (#47)
* use CoSTEER as component name

* rename factorimplementation to avoid confusion

* rename modelimplementation

* align benchmark and evolving evaluators

* add scenario to evaluator init function

* rename all factorimplementationknowledge in CoSTEER

* remove all scenario related information in component

* remove useless code

---------

Co-authored-by: xuyang1 <xuyang1@microsoft.com>
2024-07-05 17:42:00 +08:00