mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-08-09 21:10:56 +00:00
TPTBusiness
d2a5fdda69
npm vulnerabilities fixed (4 → 0): - vite: 8.0.x → 6.4.2 (Path Traversal, File Read bypass) - micromatch: Added override to ^4.0.8 (ReDoS) - braces: Already overridden to ^3.0.3 - lodash/lodash-es: Already overridden to ^4.18.0 - postcss: Already overridden to ^8.4.31 - picomatch: Already overridden to ^4.0.4 .bandit.yml restored to root: - Security scanning configuration for pre-commit hooks - Proper skips for false positives and intentional patterns Result: 0 npm vulnerabilities, 0 bandit issues
25 lines
882 B
YAML
25 lines
882 B
YAML
# Bandit security scanning configuration
|
|
# This file configures which security checks to skip
|
|
|
|
skips:
|
|
# B101: assert_used - assert statements are used for development
|
|
- 'B101'
|
|
# B104: hardcoded_bind_all_interfaces - we bind to 0.0.0.0 intentionally
|
|
- 'B104'
|
|
# B108: hardcoded_tmp_directory - /tmp is used intentionally for Docker volumes
|
|
- 'B108'
|
|
# B301: pickle - pickle is used for session serialization (internal data only)
|
|
- 'B301'
|
|
# B310: urllib_urlopen - used for internal URL fetching
|
|
- 'B310'
|
|
# B311: random - random is used for non-crypto purposes
|
|
- 'B311'
|
|
# B404: subprocess - subprocess is used for process management
|
|
- 'B404'
|
|
# B603: subprocess_without_shell_equals_true - intentional usage
|
|
- 'B603'
|
|
# B608: hardcoded_sql_expressions - false positive
|
|
- 'B608'
|
|
# B609: linux_commands_wildcard_injection - intentional usage
|
|
- 'B609'
|