Skip to content

#176 nightly cron job for install testing#177

Merged
docktermj merged 4 commits into
mainfrom
176-skern
May 24, 2025
Merged

#176 nightly cron job for install testing#177
docktermj merged 4 commits into
mainfrom
176-skern

Conversation

@kernelsam
Copy link
Copy Markdown
Contributor

@kernelsam kernelsam commented May 23, 2025

Pull request questions

Which issue does this address

Issue number: #176

@kernelsam kernelsam requested a review from a team as a code owner May 23, 2025 15:28
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 23, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 764 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 688 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 671 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 23, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 764 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 688 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 671 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 23, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 764 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 688 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 671 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 23, 2025

🛡️ Bandit Scan Results Summary

We found 2 High, 2 Medium, and 1 Low severity issues.

Detailed Findings

Severity Issue File Line Confidence More Info Test ID
🟡 LOW Consider possible security implications associated with the subprocess module. sz_tools/_tool_helpers.py 14 HIGH More Info B404
⚪ MEDIUM Possible SQL injection vector through string-based query construction. sz_tools/_sz_database.py 354 LOW More Info B608
⚪ MEDIUM Probable insecure usage of temp file/directory. sz_tools/_tool_helpers.py 764 MEDIUM More Info B108
🔴 HIGH Starting a process with a shell, possible injection detected, security issue. sz_tools/_tool_helpers.py 688 HIGH More Info B605
🔴 HIGH subprocess call with shell=True identified, security issue. sz_tools/_tool_helpers.py 671 HIGH More Info B602
✨ About this Report

This report was generated by the official Bandit GitHub Action to ensure our codebase stays secure.

📕 What is Bandit?

Bandit is a tool designed to find common security issues in Python code. To learn more about how Bandit helps to keep Python code safe, visit the Bandit documentation.

👥 Community Support

Got questions or need help with Bandit Action?

  • Join our community on the Discord server.
  • Share tips, get advice, and collaborate on security best practices.

@docktermj docktermj merged commit 8b5670f into main May 24, 2025
26 of 82 checks passed
@docktermj docktermj deleted the 176-skern branch May 24, 2025 00:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@docktermj docktermj docktermj approved these changes

Assignees

@docktermj docktermj

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@kernelsam @docktermj @senzingdevops