Skip to content

Commit cb55f50

Browse files
sdv-teamR-Palazzo
sdv-team
and
R-Palazzo
authored
Latest Code Analysis (#395)
Co-authored-by: R-Palazzo <[email protected]>
1 parent ed600bf commit cb55f50

File tree

1 file changed

+113
-0
lines changed

1 file changed

+113
-0
lines changed

‎static_code_analysis.txt‎

Lines changed: 113 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,113 @@
1+
Run started:2024-04-10 07:28:27.016244
2+
3+
Test results:
4+
>> Issue: [B403:blacklist] Consider possible security implications associated with pickle module.
5+
Severity: Low Confidence: High
6+
CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html)
7+
More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_imports.html#b403-import-pickle
8+
Location: ./copulas/multivariate/base.py:3:0
9+
2
10+
3 import pickle
11+
4
12+
13+
--------------------------------------------------
14+
>> Issue: [B301:blacklist] Pickle and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue.
15+
Severity: Medium Confidence: High
16+
CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html)
17+
More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_calls.html#b301-pickle
18+
Location: ./copulas/multivariate/base.py:177:19
19+
176 with open(path, 'rb') as pickle_file:
20+
177 return pickle.load(pickle_file)
21+
178
22+
23+
--------------------------------------------------
24+
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
25+
Severity: Low Confidence: High
26+
CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
27+
More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html
28+
Location: ./copulas/optimize/__init__.py:26:4
29+
25 """
30+
26 assert (f(xmin) <= 0.0).all()
31+
27 assert (f(xmax) >= 0.0).all()
32+
33+
--------------------------------------------------
34+
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
35+
Severity: Low Confidence: High
36+
CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
37+
More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html
38+
Location: ./copulas/optimize/__init__.py:27:4
39+
26 assert (f(xmin) <= 0.0).all()
40+
27 assert (f(xmax) >= 0.0).all()
41+
28
42+
43+
--------------------------------------------------
44+
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
45+
Severity: Low Confidence: High
46+
CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
47+
More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html
48+
Location: ./copulas/optimize/__init__.py:71:4
49+
70 shape = np.shape(fa)
50+
71 assert shape == np.shape(fb)
51+
72
52+
53+
--------------------------------------------------
54+
>> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
55+
Severity: Low Confidence: High
56+
CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
57+
More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html
58+
Location: ./copulas/optimize/__init__.py:77:4
59+
76 # Make sure we are bracketing a root in each case
60+
77 assert (np.sign(fa) * np.sign(fb) <= 0).all()
61+
78 t = 0.5
62+
63+
--------------------------------------------------
64+
>> Issue: [B403:blacklist] Consider possible security implications associated with pickle module.
65+
Severity: Low Confidence: High
66+
CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html)
67+
More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_imports.html#b403-import-pickle
68+
Location: ./copulas/univariate/base.py:3:0
69+
2
70+
3 import pickle
71+
4 from abc import ABC
72+
73+
--------------------------------------------------
74+
>> Issue: [B301:blacklist] Pickle and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue.
75+
Severity: Medium Confidence: High
76+
CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html)
77+
More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_calls.html#b301-pickle
78+
Location: ./copulas/univariate/base.py:477:19
79+
476 with open(path, 'rb') as pickle_file:
80+
477 return pickle.load(pickle_file)
81+
478
82+
83+
--------------------------------------------------
84+
>> Issue: [B110:try_except_pass] Try, Except, Pass detected.
85+
Severity: Low Confidence: High
86+
CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html)
87+
More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b110_try_except_pass.html
88+
Location: ./copulas/univariate/selection.py:32:8
89+
31 best_model = model
90+
32 except Exception:
91+
33 # Distribution not supported
92+
34 pass
93+
35
94+
95+
--------------------------------------------------
96+
97+
Code scanned:
98+
Total lines of code: 3973
99+
Total lines skipped (#nosec): 0
100+
Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0
101+
102+
Run metrics:
103+
Total issues (by severity):
104+
Undefined: 0
105+
Low: 7
106+
Medium: 2
107+
High: 0
108+
Total issues (by confidence):
109+
Undefined: 0
110+
Low: 0
111+
Medium: 0
112+
High: 9
113+
Files skipped (0):

0 commit comments

Comments
 (0)