Skip to content

Commit 829a6bf

Browse files
andrewhughes101andrewhughes101
committed
use bandit baseline instead of inline nosec comments
1 parent fab899c commit 829a6bf

File tree

2 files changed

+211
-1
lines changed

2 files changed

+211
-1
lines changed

‎.bandit.baseline‎

Lines changed: 210 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,210 @@
1+
{
2+
"errors": [],
3+
"generated_at": "2024-05-20T09:55:19Z",
4+
"metrics": {
5+
"./__init__.py": {
6+
"CONFIDENCE.HIGH": 0,
7+
"CONFIDENCE.LOW": 0,
8+
"CONFIDENCE.MEDIUM": 0,
9+
"CONFIDENCE.UNDEFINED": 0,
10+
"SEVERITY.HIGH": 0,
11+
"SEVERITY.LOW": 0,
12+
"SEVERITY.MEDIUM": 0,
13+
"SEVERITY.UNDEFINED": 0,
14+
"loc": 0,
15+
"nosec": 0,
16+
"skipped_tests": 0
17+
},
18+
"./docs/ansible-doc-extractor-collections.py": {
19+
"CONFIDENCE.HIGH": 0,
20+
"CONFIDENCE.LOW": 0,
21+
"CONFIDENCE.MEDIUM": 0,
22+
"CONFIDENCE.UNDEFINED": 0,
23+
"SEVERITY.HIGH": 0,
24+
"SEVERITY.LOW": 0,
25+
"SEVERITY.MEDIUM": 0,
26+
"SEVERITY.UNDEFINED": 0,
27+
"loc": 18,
28+
"nosec": 0,
29+
"skipped_tests": 0
30+
},
31+
"./docs/source/conf.py": {
32+
"CONFIDENCE.HIGH": 0,
33+
"CONFIDENCE.LOW": 0,
34+
"CONFIDENCE.MEDIUM": 0,
35+
"CONFIDENCE.UNDEFINED": 0,
36+
"SEVERITY.HIGH": 0,
37+
"SEVERITY.LOW": 0,
38+
"SEVERITY.MEDIUM": 0,
39+
"SEVERITY.UNDEFINED": 0,
40+
"loc": 11,
41+
"nosec": 0,
42+
"skipped_tests": 0
43+
},
44+
"./plugins/__init__.py": {
45+
"CONFIDENCE.HIGH": 0,
46+
"CONFIDENCE.LOW": 0,
47+
"CONFIDENCE.MEDIUM": 0,
48+
"CONFIDENCE.UNDEFINED": 0,
49+
"SEVERITY.HIGH": 0,
50+
"SEVERITY.LOW": 0,
51+
"SEVERITY.MEDIUM": 0,
52+
"SEVERITY.UNDEFINED": 0,
53+
"loc": 0,
54+
"nosec": 0,
55+
"skipped_tests": 0
56+
},
57+
"./plugins/doc_fragments/cmci.py": {
58+
"CONFIDENCE.HIGH": 0,
59+
"CONFIDENCE.LOW": 0,
60+
"CONFIDENCE.MEDIUM": 0,
61+
"CONFIDENCE.UNDEFINED": 0,
62+
"SEVERITY.HIGH": 0,
63+
"SEVERITY.LOW": 0,
64+
"SEVERITY.MEDIUM": 0,
65+
"SEVERITY.UNDEFINED": 0,
66+
"loc": 259,
67+
"nosec": 0,
68+
"skipped_tests": 0
69+
},
70+
"./plugins/module_utils/__init__.py": {
71+
"CONFIDENCE.HIGH": 0,
72+
"CONFIDENCE.LOW": 0,
73+
"CONFIDENCE.MEDIUM": 0,
74+
"CONFIDENCE.UNDEFINED": 0,
75+
"SEVERITY.HIGH": 0,
76+
"SEVERITY.LOW": 0,
77+
"SEVERITY.MEDIUM": 0,
78+
"SEVERITY.UNDEFINED": 0,
79+
"loc": 0,
80+
"nosec": 0,
81+
"skipped_tests": 0
82+
},
83+
"./plugins/module_utils/cmci.py": {
84+
"CONFIDENCE.HIGH": 0,
85+
"CONFIDENCE.LOW": 0,
86+
"CONFIDENCE.MEDIUM": 1,
87+
"CONFIDENCE.UNDEFINED": 0,
88+
"SEVERITY.HIGH": 0,
89+
"SEVERITY.LOW": 1,
90+
"SEVERITY.MEDIUM": 0,
91+
"SEVERITY.UNDEFINED": 0,
92+
"loc": 633,
93+
"nosec": 0,
94+
"skipped_tests": 0
95+
},
96+
"./plugins/modules/__init__.py": {
97+
"CONFIDENCE.HIGH": 0,
98+
"CONFIDENCE.LOW": 0,
99+
"CONFIDENCE.MEDIUM": 0,
100+
"CONFIDENCE.UNDEFINED": 0,
101+
"SEVERITY.HIGH": 0,
102+
"SEVERITY.LOW": 0,
103+
"SEVERITY.MEDIUM": 0,
104+
"SEVERITY.UNDEFINED": 0,
105+
"loc": 0,
106+
"nosec": 0,
107+
"skipped_tests": 0
108+
},
109+
"./plugins/modules/cmci_action.py": {
110+
"CONFIDENCE.HIGH": 0,
111+
"CONFIDENCE.LOW": 0,
112+
"CONFIDENCE.MEDIUM": 0,
113+
"CONFIDENCE.UNDEFINED": 0,
114+
"SEVERITY.HIGH": 0,
115+
"SEVERITY.LOW": 0,
116+
"SEVERITY.MEDIUM": 0,
117+
"SEVERITY.UNDEFINED": 0,
118+
"loc": 505,
119+
"nosec": 0,
120+
"skipped_tests": 0
121+
},
122+
"./plugins/modules/cmci_create.py": {
123+
"CONFIDENCE.HIGH": 0,
124+
"CONFIDENCE.LOW": 0,
125+
"CONFIDENCE.MEDIUM": 0,
126+
"CONFIDENCE.UNDEFINED": 0,
127+
"SEVERITY.HIGH": 0,
128+
"SEVERITY.LOW": 0,
129+
"SEVERITY.MEDIUM": 0,
130+
"SEVERITY.UNDEFINED": 0,
131+
"loc": 468,
132+
"nosec": 0,
133+
"skipped_tests": 0
134+
},
135+
"./plugins/modules/cmci_delete.py": {
136+
"CONFIDENCE.HIGH": 0,
137+
"CONFIDENCE.LOW": 0,
138+
"CONFIDENCE.MEDIUM": 0,
139+
"CONFIDENCE.UNDEFINED": 0,
140+
"SEVERITY.HIGH": 0,
141+
"SEVERITY.LOW": 0,
142+
"SEVERITY.MEDIUM": 0,
143+
"SEVERITY.UNDEFINED": 0,
144+
"loc": 447,
145+
"nosec": 0,
146+
"skipped_tests": 0
147+
},
148+
"./plugins/modules/cmci_get.py": {
149+
"CONFIDENCE.HIGH": 0,
150+
"CONFIDENCE.LOW": 0,
151+
"CONFIDENCE.MEDIUM": 0,
152+
"CONFIDENCE.UNDEFINED": 0,
153+
"SEVERITY.HIGH": 0,
154+
"SEVERITY.LOW": 0,
155+
"SEVERITY.MEDIUM": 0,
156+
"SEVERITY.UNDEFINED": 0,
157+
"loc": 535,
158+
"nosec": 0,
159+
"skipped_tests": 0
160+
},
161+
"./plugins/modules/cmci_update.py": {
162+
"CONFIDENCE.HIGH": 0,
163+
"CONFIDENCE.LOW": 0,
164+
"CONFIDENCE.MEDIUM": 0,
165+
"CONFIDENCE.UNDEFINED": 0,
166+
"SEVERITY.HIGH": 0,
167+
"SEVERITY.LOW": 0,
168+
"SEVERITY.MEDIUM": 0,
169+
"SEVERITY.UNDEFINED": 0,
170+
"loc": 477,
171+
"nosec": 0,
172+
"skipped_tests": 0
173+
},
174+
"_totals": {
175+
"CONFIDENCE.HIGH": 0,
176+
"CONFIDENCE.LOW": 0,
177+
"CONFIDENCE.MEDIUM": 1,
178+
"CONFIDENCE.UNDEFINED": 0,
179+
"SEVERITY.HIGH": 0,
180+
"SEVERITY.LOW": 1,
181+
"SEVERITY.MEDIUM": 0,
182+
"SEVERITY.UNDEFINED": 0,
183+
"loc": 3353,
184+
"nosec": 0,
185+
"skipped_tests": 0
186+
}
187+
},
188+
"results": [
189+
{
190+
"code": "35 CMCI_USER = 'cmci_user'\n36 CMCI_PASSWORD = 'cmci_password'\n37 CMCI_CERT = 'cmci_cert'\n",
191+
"col_offset": 16,
192+
"end_col_offset": 31,
193+
"filename": "./plugins/module_utils/cmci.py",
194+
"issue_confidence": "MEDIUM",
195+
"issue_cwe": {
196+
"id": 259,
197+
"link": "https://cwe.mitre.org/data/definitions/259.html"
198+
},
199+
"issue_severity": "LOW",
200+
"issue_text": "Possible hardcoded password: 'cmci_password'",
201+
"line_number": 36,
202+
"line_range": [
203+
36
204+
],
205+
"more_info": "https://bandit.readthedocs.io/en/1.7.8/plugins/b105_hardcoded_password_string.html",
206+
"test_id": "B105",
207+
"test_name": "hardcoded_password_string"
208+
}
209+
]
210+
}

‎plugins/module_utils/cmci.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333
CMCI_HOST = 'cmci_host'
3434
CMCI_PORT = 'cmci_port'
3535
CMCI_USER = 'cmci_user'
36-
CMCI_PASSWORD = 'cmci_password' # nosec B105
36+
CMCI_PASSWORD = 'cmci_password'
3737
CMCI_CERT = 'cmci_cert'
3838
CMCI_KEY = 'cmci_key'
3939
CONTEXT = 'context'

0 commit comments

Comments
 (0)