NexQuant

mirror of https://github.com/NicolasBohn/NexQuant.git synced 2026-07-27 15:37:44 +00:00

Files

T

TPTBusiness f3a2e2b4f1 fix: Add Bandit security scanning and fix critical vulnerabilities

- Add Bandit security scanner to requirements and pre-commit hooks
- Fix CWE-22 path traversal in tarfile/zipfile extraction (3 files)
  * Add _safe_extract() validation in submit.py, env.py, kaggle_crawler.py
  * Prevents malicious archives from writing outside target directory
- Fix MD5 hashlib calls with usedforsecurity=False flag (2 files)
  * submission_format_test.txt files for checksum validation
- Configure .bandit.yml for automated security scanning
  * Skip known false positives: B602 (subprocess), B701 (Jinja2)
- Add security runbook documentation in docs/security/
- Add pre-commit hook scripts for automated Bandit scanning

All 106 backtesting and security tests pass.
Security issues resolved: B201, B202, B324 (9 total fixes)

2026-04-03 11:55:05 +02:00

_static

chore: update load add & (#944 )

2025-06-06 16:58:09 +08:00

research

feat: run benchmark on gpt-4o & llama 3.1 (#497 )

2024-11-26 12:02:09 +08:00

scens

docs: add documentation for Data Science configurable options (#1301 )

2025-11-25 16:56:30 +08:00

security

fix: Add Bandit security scanning and fix critical vulnerabilities