Skip to content

senzing-factory/build-resources#179 add slack notifications#144

Merged
docktermj merged 3 commits into
mainfrom
sf-br-179-skern
Apr 15, 2025
Merged

senzing-factory/build-resources#179 add slack notifications#144
docktermj merged 3 commits into
mainfrom
sf-br-179-skern

Conversation

@kernelsam
Copy link
Copy Markdown
Contributor

@kernelsam kernelsam commented Apr 15, 2025

Pull request questions

Which issue does this address

Issue number: senzing-factory/build-resources#179

@kernelsam kernelsam requested a review from a team as a code owner April 15, 2025 18:46
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 15, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 738 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 662 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 645 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 15, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 738 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 662 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 645 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@docktermj docktermj self-assigned this Apr 15, 2025
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 15, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 738 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 662 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 645 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@docktermj docktermj merged commit a7ca40f into main Apr 15, 2025
14 of 65 checks passed
@docktermj docktermj deleted the sf-br-179-skern branch April 15, 2025 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@docktermj docktermj

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@kernelsam @docktermj @senzingdevops