Skip to content

Bandit warnings point to broken docs link because latest versions haven't been publishedΒ #1286

@astrojuanlu

Description

@astrojuanlu

Describe the bug

We got this warning from bandit:

 >> Issue: [B615:huggingface_unsafe_download] Unsafe Hugging Face Hub download without revision pinning in load_dataset()
   Severity: Medium   Confidence: High
   CWE: CWE-494 (https://cwe.mitre.org/data/definitions/494.html)
   More Info: https://bandit.readthedocs.io/en/1.8.6/plugins/b615_huggingface_unsafe_download.html

However, https://bandit.readthedocs.io/en/1.8.6/ doesn't exist (see list of versions https://app.readthedocs.org/projects/bandit/)

Reproduction steps

1. Install latest PyCQA
2. Force a warning
3. Click on "More Info" link

Expected behavior

"More Info" links should work

Bandit version

1.8.6

Python version

3.13 (Default)

Additional context

No response

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions