mirror of
https://github.com/NicolasBohn/NexQuant.git
synced 2026-07-28 07:57:44 +00:00
a1c133094a
- Replace hardcoded api_key='ollama' with os.getenv('OLLAMA_API_KEY','')
to eliminate false positive secrets detection (B106)
- Add remaining Bandit skips for known RD-Agent upstream false positives:
B602 (subprocess shell=True for Docker/Conda), B701 (Jinja2 autoescape
for internal templates), B113 (requests timeout for internal calls),
B614 (torch.load for benchmark .pt files), B307 (eval for config input)