Skip to content

Commit e9864f1

Browse files
ielizieliz
authored
Merge branch 'openvinotoolkit:master' into master
2 parents f4103c4 + 3be5d55 commit e9864f1

File tree

1,761 files changed

+37469
-26222
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

1,761 files changed

+37469
-26222
lines changed

‎.bandit

Lines changed: 399 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,399 @@
1+
2+
### This config may optionally select a subset of tests to run or skip by
3+
### filling out the 'tests' and 'skips' lists given below. If no tests are
4+
### specified for inclusion then it is assumed all tests are desired. The skips
5+
### set will remove specific tests from the include set. This can be controlled
6+
### using the -t/-s CLI options. Note that the same test ID should not appear
7+
### in both 'tests' and 'skips', this would be nonsensical and is detected by
8+
### Bandit at runtime.
9+
10+
# Available tests:
11+
# B101 : assert_used
12+
# B102 : exec_used
13+
# B103 : set_bad_file_permissions
14+
# B104 : hardcoded_bind_all_interfaces
15+
# B105 : hardcoded_password_string
16+
# B106 : hardcoded_password_funcarg
17+
# B107 : hardcoded_password_default
18+
# B108 : hardcoded_tmp_directory
19+
# B110 : try_except_pass
20+
# B112 : try_except_continue
21+
# B201 : flask_debug_true
22+
# B301 : pickle
23+
# B302 : marshal
24+
# B303 : md5
25+
# B304 : ciphers
26+
# B305 : cipher_modes
27+
# B306 : mktemp_q
28+
# B307 : eval
29+
# B308 : mark_safe
30+
# B309 : httpsconnection
31+
# B310 : urllib_urlopen
32+
# B311 : random
33+
# B312 : telnetlib
34+
# B313 : xml_bad_cElementTree
35+
# B314 : xml_bad_ElementTree
36+
# B315 : xml_bad_expatreader
37+
# B316 : xml_bad_expatbuilder
38+
# B317 : xml_bad_sax
39+
# B318 : xml_bad_minidom
40+
# B319 : xml_bad_pulldom
41+
# B320 : xml_bad_etree
42+
# B321 : ftplib
43+
# B323 : unverified_context
44+
# B324 : hashlib_new_insecure_functions
45+
# B325 : tempnam
46+
# B401 : import_telnetlib
47+
# B402 : import_ftplib
48+
# B403 : import_pickle
49+
# B404 : import_subprocess
50+
# B405 : import_xml_etree
51+
# B406 : import_xml_sax
52+
# B407 : import_xml_expat
53+
# B408 : import_xml_minidom
54+
# B409 : import_xml_pulldom
55+
# B410 : import_lxml
56+
# B411 : import_xmlrpclib
57+
# B412 : import_httpoxy
58+
# B413 : import_pycrypto
59+
# B501 : request_with_no_cert_validation
60+
# B502 : ssl_with_bad_version
61+
# B503 : ssl_with_bad_defaults
62+
# B504 : ssl_with_no_version
63+
# B505 : weak_cryptographic_key
64+
# B506 : yaml_load
65+
# B507 : ssh_no_host_key_verification
66+
# B601 : paramiko_calls
67+
# B602 : subprocess_popen_with_shell_equals_true
68+
# B603 : subprocess_without_shell_equals_true
69+
# B604 : any_other_function_with_shell_equals_true
70+
# B605 : start_process_with_a_shell
71+
# B606 : start_process_with_no_shell
72+
# B607 : start_process_with_partial_path
73+
# B608 : hardcoded_sql_expressions
74+
# B609 : linux_commands_wildcard_injection
75+
# B610 : django_extra_used
76+
# B611 : django_rawsql_used
77+
# B701 : jinja2_autoescape_false
78+
# B702 : use_of_mako_templates
79+
# B703 : django_mark_safe
80+
81+
# (optional) list included test IDs here, eg '[B101, B406]':
82+
# IPAS Required Checkers. Do not disable these
83+
# Additional checkers may be added if desired
84+
tests:
85+
[ 'B301', 'B302', 'B303', 'B304', 'B305', 'B306', 'B308', 'B309', 'B310', 'B311', 'B312', 'B313', 'B314', 'B315', 'B316', 'B317', 'B318', 'B319', 'B320', 'B321', 'B323', 'B324', 'B325', 'B401', 'B402', 'B403', 'B404', 'B405', 'B406', 'B407', 'B408', 'B409', 'B410', 'B411', 'B412', 'B413']
86+
87+
# (optional) list skipped test IDs here, eg '[B101, B406]':
88+
# The following checkers are not required but be added to tests list if desired
89+
skips:
90+
[ 'B101', 'B102', 'B103', 'B104', 'B105', 'B106', 'B107', 'B108', 'B110', 'B112', 'B201', 'B501', 'B502', 'B503', 'B504', 'B505', 'B506', 'B507', 'B601', 'B602', 'B603', 'B604', 'B605', 'B606', 'B607', 'B608', 'B609', 'B610', 'B611', 'B701', 'B702', 'B703']
91+
92+
### (optional) plugin settings - some test plugins require configuration data
93+
### that may be given here, per-plugin. All bandit test plugins have a built in
94+
### set of sensible defaults and these will be used if no configuration is
95+
### provided. It is not necessary to provide settings for every (or any) plugin
96+
### if the defaults are acceptable.
97+
98+
any_other_function_with_shell_equals_true:
99+
no_shell:
100+
- os.execl
101+
- os.execle
102+
- os.execlp
103+
- os.execlpe
104+
- os.execv
105+
- os.execve
106+
- os.execvp
107+
- os.execvpe
108+
- os.spawnl
109+
- os.spawnle
110+
- os.spawnlp
111+
- os.spawnlpe
112+
- os.spawnv
113+
- os.spawnve
114+
- os.spawnvp
115+
- os.spawnvpe
116+
- os.startfile
117+
shell:
118+
- os.system
119+
- os.popen
120+
- os.popen2
121+
- os.popen3
122+
- os.popen4
123+
- popen2.popen2
124+
- popen2.popen3
125+
- popen2.popen4
126+
- popen2.Popen3
127+
- popen2.Popen4
128+
- commands.getoutput
129+
- commands.getstatusoutput
130+
subprocess:
131+
- subprocess.Popen
132+
- subprocess.call
133+
- subprocess.check_call
134+
- subprocess.check_output
135+
- subprocess.run
136+
assert_used:
137+
skips: []
138+
hardcoded_tmp_directory:
139+
tmp_dirs:
140+
- /tmp
141+
- /var/tmp
142+
- /dev/shm
143+
linux_commands_wildcard_injection:
144+
no_shell:
145+
- os.execl
146+
- os.execle
147+
- os.execlp
148+
- os.execlpe
149+
- os.execv
150+
- os.execve
151+
- os.execvp
152+
- os.execvpe
153+
- os.spawnl
154+
- os.spawnle
155+
- os.spawnlp
156+
- os.spawnlpe
157+
- os.spawnv
158+
- os.spawnve
159+
- os.spawnvp
160+
- os.spawnvpe
161+
- os.startfile
162+
shell:
163+
- os.system
164+
- os.popen
165+
- os.popen2
166+
- os.popen3
167+
- os.popen4
168+
- popen2.popen2
169+
- popen2.popen3
170+
- popen2.popen4
171+
- popen2.Popen3
172+
- popen2.Popen4
173+
- commands.getoutput
174+
- commands.getstatusoutput
175+
subprocess:
176+
- subprocess.Popen
177+
- subprocess.call
178+
- subprocess.check_call
179+
- subprocess.check_output
180+
- subprocess.run
181+
ssl_with_bad_defaults:
182+
bad_protocol_versions:
183+
- PROTOCOL_SSLv2
184+
- SSLv2_METHOD
185+
- SSLv23_METHOD
186+
- PROTOCOL_SSLv3
187+
- PROTOCOL_TLSv1
188+
- SSLv3_METHOD
189+
- TLSv1_METHOD
190+
ssl_with_bad_version:
191+
bad_protocol_versions:
192+
- PROTOCOL_SSLv2
193+
- SSLv2_METHOD
194+
- SSLv23_METHOD
195+
- PROTOCOL_SSLv3
196+
- PROTOCOL_TLSv1
197+
- SSLv3_METHOD
198+
- TLSv1_METHOD
199+
start_process_with_a_shell:
200+
no_shell:
201+
- os.execl
202+
- os.execle
203+
- os.execlp
204+
- os.execlpe
205+
- os.execv
206+
- os.execve
207+
- os.execvp
208+
- os.execvpe
209+
- os.spawnl
210+
- os.spawnle
211+
- os.spawnlp
212+
- os.spawnlpe
213+
- os.spawnv
214+
- os.spawnve
215+
- os.spawnvp
216+
- os.spawnvpe
217+
- os.startfile
218+
shell:
219+
- os.system
220+
- os.popen
221+
- os.popen2
222+
- os.popen3
223+
- os.popen4
224+
- popen2.popen2
225+
- popen2.popen3
226+
- popen2.popen4
227+
- popen2.Popen3
228+
- popen2.Popen4
229+
- commands.getoutput
230+
- commands.getstatusoutput
231+
subprocess:
232+
- subprocess.Popen
233+
- subprocess.call
234+
- subprocess.check_call
235+
- subprocess.check_output
236+
- subprocess.run
237+
start_process_with_no_shell:
238+
no_shell:
239+
- os.execl
240+
- os.execle
241+
- os.execlp
242+
- os.execlpe
243+
- os.execv
244+
- os.execve
245+
- os.execvp
246+
- os.execvpe
247+
- os.spawnl
248+
- os.spawnle
249+
- os.spawnlp
250+
- os.spawnlpe
251+
- os.spawnv
252+
- os.spawnve
253+
- os.spawnvp
254+
- os.spawnvpe
255+
- os.startfile
256+
shell:
257+
- os.system
258+
- os.popen
259+
- os.popen2
260+
- os.popen3
261+
- os.popen4
262+
- popen2.popen2
263+
- popen2.popen3
264+
- popen2.popen4
265+
- popen2.Popen3
266+
- popen2.Popen4
267+
- commands.getoutput
268+
- commands.getstatusoutput
269+
subprocess:
270+
- subprocess.Popen
271+
- subprocess.call
272+
- subprocess.check_call
273+
- subprocess.check_output
274+
- subprocess.run
275+
start_process_with_partial_path:
276+
no_shell:
277+
- os.execl
278+
- os.execle
279+
- os.execlp
280+
- os.execlpe
281+
- os.execv
282+
- os.execve
283+
- os.execvp
284+
- os.execvpe
285+
- os.spawnl
286+
- os.spawnle
287+
- os.spawnlp
288+
- os.spawnlpe
289+
- os.spawnv
290+
- os.spawnve
291+
- os.spawnvp
292+
- os.spawnvpe
293+
- os.startfile
294+
shell:
295+
- os.system
296+
- os.popen
297+
- os.popen2
298+
- os.popen3
299+
- os.popen4
300+
- popen2.popen2
301+
- popen2.popen3
302+
- popen2.popen4
303+
- popen2.Popen3
304+
- popen2.Popen4
305+
- commands.getoutput
306+
- commands.getstatusoutput
307+
subprocess:
308+
- subprocess.Popen
309+
- subprocess.call
310+
- subprocess.check_call
311+
- subprocess.check_output
312+
- subprocess.run
313+
subprocess_popen_with_shell_equals_true:
314+
no_shell:
315+
- os.execl
316+
- os.execle
317+
- os.execlp
318+
- os.execlpe
319+
- os.execv
320+
- os.execve
321+
- os.execvp
322+
- os.execvpe
323+
- os.spawnl
324+
- os.spawnle
325+
- os.spawnlp
326+
- os.spawnlpe
327+
- os.spawnv
328+
- os.spawnve
329+
- os.spawnvp
330+
- os.spawnvpe
331+
- os.startfile
332+
shell:
333+
- os.system
334+
- os.popen
335+
- os.popen2
336+
- os.popen3
337+
- os.popen4
338+
- popen2.popen2
339+
- popen2.popen3
340+
- popen2.popen4
341+
- popen2.Popen3
342+
- popen2.Popen4
343+
- commands.getoutput
344+
- commands.getstatusoutput
345+
subprocess:
346+
- subprocess.Popen
347+
- subprocess.call
348+
- subprocess.check_call
349+
- subprocess.check_output
350+
- subprocess.run
351+
subprocess_without_shell_equals_true:
352+
no_shell:
353+
- os.execl
354+
- os.execle
355+
- os.execlp
356+
- os.execlpe
357+
- os.execv
358+
- os.execve
359+
- os.execvp
360+
- os.execvpe
361+
- os.spawnl
362+
- os.spawnle
363+
- os.spawnlp
364+
- os.spawnlpe
365+
- os.spawnv
366+
- os.spawnve
367+
- os.spawnvp
368+
- os.spawnvpe
369+
- os.startfile
370+
shell:
371+
- os.system
372+
- os.popen
373+
- os.popen2
374+
- os.popen3
375+
- os.popen4
376+
- popen2.popen2
377+
- popen2.popen3
378+
- popen2.popen4
379+
- popen2.Popen3
380+
- popen2.Popen4
381+
- commands.getoutput
382+
- commands.getstatusoutput
383+
subprocess:
384+
- subprocess.Popen
385+
- subprocess.call
386+
- subprocess.check_call
387+
- subprocess.check_output
388+
- subprocess.run
389+
try_except_continue:
390+
check_typed_exception: false
391+
try_except_pass:
392+
check_typed_exception: false
393+
weak_cryptographic_key:
394+
weak_key_size_dsa_high: 1024
395+
weak_key_size_dsa_medium: 2048
396+
weak_key_size_ec_high: 160
397+
weak_key_size_ec_medium: 224
398+
weak_key_size_rsa_high: 1024
399+
weak_key_size_rsa_medium: 2048

0 commit comments

Comments
 (0)