Skip to content

Commit 0aeecf9

Browse files
committed
chore: configure Bandit for security checks and update CI workflows
- Added a new `.bandit` configuration file to skip specific security checks related to OAuth protocol constants and container bindings. - Updated the linting workflow to use the new Bandit configuration file for security issue checks. - Changed the test workflow to install dependencies from `requirements-dev.txt` instead of `requirements.txt` for better development environment setup.
1 parent 739cf03 commit 0aeecf9

File tree

3 files changed

+7
-6
lines changed

3 files changed

+7
-6
lines changed

.bandit

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
skips:
2+
- B105 # hardcoded_password_string - OAuth protocol constants
3+
- B106 # hardcoded_password_funcarg - OAuth protocol constants
4+
- B104 # hardcoded_bind_all_interfaces - Intentional for containers

.github/workflows/lint.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,8 @@ jobs:
3636
- name: Check for security issues with Bandit
3737
run: |
3838
pip install bandit[toml]>=1.7.0
39-
bandit -r src/ -f json -o bandit-report.json || true
40-
bandit -r src/
39+
bandit -r src/ --configfile .bandit -f json -o bandit-report.json || true
40+
bandit -r src/ --configfile .bandit
4141
4242
- name: Type checking with mypy (optional)
4343
run: |

.github/workflows/test.yml

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,10 +26,7 @@ jobs:
2626
- name: Install dependencies
2727
run: |
2828
python -m pip install --upgrade pip
29-
pip install -r requirements.txt
30-
31-
# Install coverage for test reporting
32-
pip install pytest-cov>=4.0.0
29+
pip install -r requirements-dev.txt
3330
3431
- name: Run tests with coverage
3532
run: |

0 commit comments

Comments
 (0)