output.txt

[sudo] password for toor:
Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu noble InRelease
Hit:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu noble-updates InRelease
Hit:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu noble-backports InRelease
Hit:4 http://security.ubuntu.com/ubuntu noble-security InRelease
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
18 packages can be upgraded. Run 'apt list --upgradable' to see them.

Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
python3 is already the newest version (3.12.3-0ubuntu2).
python3-pip is already the newest version (24.0+dfsg-1ubuntu1).
python3-venv is already the newest version (3.12.3-0ubuntu2).
git is already the newest version (1:2.43.0-1ubuntu7.2).
0 upgraded, 0 newly installed, 0 to remove and 18 not upgraded.

Python 3.12.3

git version 2.43.0

pip 24.0 from /usr/lib/python3/dist-packages/pip (python 3.12)

hint: Using 'master' as the name for the initial branch. This default branch name
hint: is subject to change. To configure the initial branch name to use in all
hint: of your new repositories, which will suppress this warning, call:
hint:
hint:   git config --global init.defaultBranch <name>
hint:
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint:
hint:   git branch -m <name>
Initialized empty Git repository in /home/toor/precommit-lab/.git/

Collecting pre-commit
  Downloading pre_commit-3.8.0-py2.py3-none-any.whl.metadata (1.3 kB)
Collecting cfgv>=2.0.0
  Downloading cfgv-3.4.0-py2.py3-none-any.whl.metadata (8.5 kB)
Collecting identify>=1.0.0
  Downloading identify-2.6.1-py2.py3-none-any.whl.metadata (4.4 kB)
Collecting nodeenv>=0.11.1
  Downloading nodeenv-1.9.1-py2.py3-none-any.whl.metadata (21 kB)
Collecting pyyaml>=5.1
  Using cached PyYAML-6.0.2-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (2.1 kB)
Collecting virtualenv>=20.10.0
  Downloading virtualenv-20.26.4-py3-none-any.whl.metadata (4.5 kB)
Collecting distlib<1,>=0.3.7
  Downloading distlib-0.3.9-py2.py3-none-any.whl.metadata (5.2 kB)
Collecting filelock<4,>=3.12.2
  Downloading filelock-3.16.1-py3-none-any.whl.metadata (2.9 kB)
Collecting platformdirs<5,>=3.9.1
  Downloading platformdirs-4.3.6-py3-none-any.whl.metadata (11 kB)
Downloading pre_commit-3.8.0-py2.py3-none-any.whl (204 kB)
Downloading cfgv-3.4.0-py2.py3-none-any.whl (7.2 kB)
Downloading identify-2.6.1-py2.py3-none-any.whl (98 kB)
Downloading nodeenv-1.9.1-py2.py3-none-any.whl (22 kB)
Downloading virtualenv-20.26.4-py3-none-any.whl (6.0 MB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 6.0/6.0 MB 12.1 MB/s eta 0:00:00
Downloading distlib-0.3.9-py2.py3-none-any.whl (468 kB)
Downloading filelock-3.16.1-py3-none-any.whl (16 kB)
Downloading platformdirs-4.3.6-py3-none-any.whl (18 kB)
Installing collected packages: distlib, pyyaml, platformdirs, nodeenv, identify, filelock, cfgv, virtualenv, pre-commit
Successfully installed cfgv-3.4.0 distlib-0.3.9 filelock-3.16.1 identify-2.6.1 nodeenv-1.9.1 platformdirs-4.3.6 pre-commit-3.8.0 pyyaml-6.0.2 virtualenv-20.26.4

pre-commit 3.8.0

pre-commit installed at .git/hooks/pre-commit

[INFO] Initializing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Initializing environment for https://github.com/psf/black.
[INFO] Initializing environment for https://github.com/PyCQA/flake8.
[INFO] Initializing environment for https://github.com/PyCQA/bandit.
[INFO] Installing environment for https://github.com/pre-commit/pre-commit-hooks.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/psf/black.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/PyCQA/flake8.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
[INFO] Installing environment for https://github.com/PyCQA/bandit.
[INFO] Once installed this environment will be reused.
[INFO] This may take a few minutes...
trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...........................................(no files to check)Skipped
check for added large files..............................................Passed
check json...........................................(no files to check)Skipped
pretty format json...................................(no files to check)Skipped
black....................................................................Failed
- hook id: black
- files were modified by this hook

reformatted app.py

All done! ✨ 🍰 ✨
1 file reformatted.

flake8...................................................................Failed
- hook id: flake8
- exit code: 1

app.py:1:1: F401 'os' imported but unused
app.py:2:1: F401 'sys' imported but unused
app.py:6:5: F841 local variable 'password' is assigned to but never used

bandit...................................................................Failed
- hook id: bandit
- exit code: 1

[main]	INFO	profile include tests: None
[main]	INFO	profile exclude tests: None
[main]	INFO	cli include tests: None
[main]	INFO	cli exclude tests: B602,B607
[main]	INFO	running on Python 3.12.3
Run started:2026-04-12 16:12:07.998266

Test results:
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'hardcoded_password123'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html
   Location: ./app.py:6:15
5	    password = "hardcoded_password123"
6	    result = a + b
7	    return result

--------------------------------------------------

Code scanned:
	Total lines of code: 11
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 1
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 1
		High: 0
Files skipped (0):

trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...........................................(no files to check)Skipped
check for added large files..............................................Passed
check json...........................................(no files to check)Skipped
pretty format json...................................(no files to check)Skipped
black....................................................................Passed
flake8...................................................................Passed
bandit...................................................................Passed

pre-commit installed at .git/hooks/pre-commit

trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...............................................................Passed
check for added large files..............................................Passed
check json...........................................(no files to check)Skipped
pretty format json...................................(no files to check)Skipped
black....................................................................Passed
flake8...................................................................Passed
bandit...................................................................Passed
Check for TODO comments..................................................Passed

trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...............................................................Passed
check for added large files..............................................Passed
check json...............................................................Passed
pretty format json.......................................................Failed
- hook id: pretty-format-json
- files were modified by this hook

Fixing file config.json

black....................................................................Passed
flake8...................................................................Passed
bandit...................................................................Passed
Check for TODO comments..................................................Passed

trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...............................................................Passed
check for added large files..............................................Passed
check json...............................................................Passed
pretty format json.......................................................Passed
black....................................................................Passed
flake8...................................................................Passed
bandit...................................................................Passed
Check for TODO comments..................................................Passed
[master (root-commit) 8f3b6d2] Add pre-commit configuration and sample files
 6 files changed, 109 insertions(+)
 create mode 100644 .bandit
 create mode 100644 .flake8
 create mode 100644 .pre-commit-config.yaml
 create mode 100644 app.py
 create mode 100644 app_fixed.py
 create mode 100644 config.yaml

trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...............................................................Passed
check for added large files..............................................Passed
check json...............................................................Passed
pretty format json.......................................................Passed
black....................................................................Failed
- hook id: black
- files were modified by this hook

reformatted bad_code.py

All done! ✨ 🍰 ✨
1 file reformatted.

flake8...................................................................Failed
- hook id: flake8
- exit code: 1

bad_code.py:2:5: F841 local variable 'password' is assigned to but never used

bandit...................................................................Failed
- hook id: bandit
- exit code: 1

[main]	INFO	profile include tests: None
[main]	INFO	profile exclude tests: None
[main]	INFO	cli include tests: None
[main]	INFO	cli exclude tests: B602,B607
[main]	INFO	running on Python 3.12.3
Run started:2026-04-12 16:18:44.011097

Test results:
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'secret123'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html
   Location: ./bad_code.py:2:15
1	def bad_function(x, y):
2	    password = "secret123"
3	    return x + y

--------------------------------------------------

Code scanned:
	Total lines of code: 29
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 1
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 1
		High: 0
Files skipped (0):

Check for TODO comments..................................................Passed

[master d4f7a39] Emergency commit
 1 file changed, 3 insertions(+)
 create mode 100644 bad_code.py

trim trailing whitespace.................................................Passed
fix end of files.........................................................Passed
check yaml...............................................................Passed
check for added large files..............................................Passed
check json...............................................................Passed
pretty format json.......................................................Passed
black....................................................................Passed
flake8...................................................................Failed
- hook id: flake8
- exit code: 1

bad_code.py:2:5: F841 local variable 'password' is assigned to but never used

bandit...................................................................Failed
- hook id: bandit
- exit code: 1

[main]	INFO	profile include tests: None
[main]	INFO	profile exclude tests: None
[main]	INFO	cli include tests: None
[main]	INFO	cli exclude tests: B602,B607
[main]	INFO	running on Python 3.12.3
Run started:2026-04-12 16:19:30.448594

Test results:
>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'secret123'
   Severity: Low   Confidence: Medium
   CWE: CWE-259 (https://cwe.mitre.org/data/definitions/259.html)
   More Info: https://bandit.readthedocs.io/en/latest/plugins/b105_hardcoded_password_string.html
   Location: ./bad_code.py:2:15
1	def bad_function(x, y):
2	    password = "secret123"
3	    return x + y

--------------------------------------------------

Code scanned:
	Total lines of code: 32
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 1
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 1
		High: 0
Files skipped (0):

Check for TODO comments..................................................Passed

total 72
drwxr-xr-x 2 toor toor 4096 Apr 12 16:11 .
drwxrwxr-x 8 toor toor 4096 Apr 12 16:19 ..
-rwxr-xr-x 1 toor toor  478 Apr 12 16:10 applypatch-msg.sample
-rwxr-xr-x 1 toor toor  896 Apr 12 16:10 commit-msg.sample
-rwxr-xr-x 1 toor toor 4726 Apr 12 16:10 fsmonitor-watchman.sample
-rwxr-xr-x 1 toor toor  189 Apr 12 16:11 post-update.sample
-rwxr-xr-x 1 toor toor  424 Apr 12 16:10 pre-applypatch.sample
-rwxr-xr-x 1 toor toor  603 Apr 12 16:11 pre-commit
-rwxr-xr-x 1 toor toor 1643 Apr 12 16:10 pre-commit.sample
-rwxr-xr-x 1 toor toor  416 Apr 12 16:10 pre-merge-commit.sample
-rwxr-xr-x 1 toor toor 1374 Apr 12 16:10 pre-push.sample
-rwxr-xr-x 1 toor toor 4898 Apr 12 16:10 pre-rebase.sample
-rwxr-xr-x 1 toor toor  544 Apr 12 16:10 pre-receive.sample
-rwxr-xr-x 1 toor toor 1492 Apr 12 16:10 prepare-commit-msg.sample
-rwxr-xr-x 1 toor toor 2783 Apr 12 16:10 push-to-checkout.sample
-rwxr-xr-x 1 toor toor 3650 Apr 12 16:10 update.sample

#!/usr/bin/env bash
# File generated by pre-commit: https://pre-commit.com
# ID: 138fd403232d2ddd5efb44317e38bf03

# start templated
INSTALL_PYTHON=/home/toor/precommit-lab/venv/bin/python3
ARGS=(hook-impl --config=.pre-commit-config.yaml --hook-type=pre-commit)
# end templated

HERE="$(cd "$(dirname "$0")" && pwd)"
ARGS+=(--hook-dir "$HERE" -- "$@")

if [ -x "$INSTALL_PYTHON" ]; then
    exec "$INSTALL_PYTHON" -mpre_commit "${ARGS[@]}"
elif command -v pre-commit > /dev/null; then
    exec pre-commit "${ARGS[@]}"
else
    echo '`pre-commit` not found.  Did you forget to activate your virtualenv?' 1>&2
    exit 1
fi

[https://github.com/pre-commit/pre-commit-hooks] updating v4.5.0 -> v5.0.0
[https://github.com/psf/black] updating 23.12.1 -> 24.10.0
[https://github.com/PyCQA/flake8] updating 7.0.0 -> 7.1.1
[https://github.com/PyCQA/bandit] updating 1.7.6 -> 1.8.3

pre-commit uninstalled

pre-commit installed at .git/hooks/pre-commit

black....................................................................Passed

flake8...................................................................Failed
- hook id: flake8
- exit code: 1

bad_code.py:2:5: F841 local variable 'password' is assigned to but never used