SG-33057 App pre-commit configuration and CI #367
7 issue(s) found
Summary of Issues
| Type | Count | Severity | Secure Coding Guidelines |
|---|---|---|---|
| B104: hardcoded_bind_all_interfaces | 1 | MEDIUM | PYTH-AORZ-20 |
| B603: subprocess_without_shell_equals_true | 3 | LOW | PYTH-INJC-30 |
| B607: start_process_with_partial_path | 2 | LOW | PYTH-INJC-30 |
| B311: blacklist | 1 | LOW | PYTH-CRYP-20 |
How do I clear all these issues?
If you suspect these issues are not actual issues, click “Clear All Issues” above. Click here for more details.
Details and Annotations
Details
bandit version 1.7.9
Annotations
Check warning on line 260 in tests/base.py
shotgrid-chorus / security/bandit
B104: hardcoded_bind_all_interfaces
Possible binding to all interfaces.
secure coding id: PYTH-AORZ-20.
Check notice on line 373 in tests/base.py
shotgrid-chorus / security/bandit
B311: blacklist
Standard pseudo-random generators are not suitable for security/cryptographic purposes.
secure coding id: PYTH-CRYP-20.
Check notice on line 28 in update_httplib2.py
shotgrid-chorus / security/bandit
B607: start_process_with_partial_path
Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.
Check notice on line 28 in update_httplib2.py
shotgrid-chorus / security/bandit
B603: subprocess_without_shell_equals_true
subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.
Check notice on line 33 in update_httplib2.py
shotgrid-chorus / security/bandit
B607: start_process_with_partial_path
Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.
Check notice on line 33 in update_httplib2.py
shotgrid-chorus / security/bandit
B603: subprocess_without_shell_equals_true
subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.
Check notice on line 50 in update_httplib2.py
shotgrid-chorus / security/bandit
B603: subprocess_without_shell_equals_true
subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.