GitHub / PyCQA/bandit / commits
Bandit is a tool designed to find common security issues in Python code.
| SHA | Message | Author | Date | Stats |
|---|---|---|---|---|
| 68ebe11e |
Bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#1472)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 66038b17 |
Bump docker/build-push-action from 7.3.0 to 7.4.0 (#1473)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 month ago | |
| 1d3053df |
Bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#1469)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 2 months ago | |
| f8b9f1a2 |
Bump docker/login-action from 4.5.1 to 4.6.0 (#1466)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| 8f237662 |
Bump docker/login-action from 4.4.0 to 4.5.1 (#1464)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| e2101037 |
Bump actions/setup-python from 6 to 7 (#1460)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
3 months ago | |
| c45446ea |
Bump docker/build-push-action from 7.2.0 to 7.3.0 (#1455)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 3bcd2716 |
Bump docker/login-action from 4.2.0 to 4.4.0 (#1456)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| cc27ebc9 |
Bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#1454)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| 3b5e651f |
Bump actions/checkout from 6 to 7 (#1440)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
4 months ago | |
| c4bfccf6 |
Bump docker/build-push-action from 7.1.0 to 7.2.0 (#1427)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 02b976dd |
Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (#1426)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| dc5d6e56 |
Bump docker/login-action from 4.1.0 to 4.2.0 (#1425)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
5 months ago | |
| 8309bc39 |
Bump actions/dependency-review-action from 4 to 5 (#1412)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| 7137a9d5 |
Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 (#1413)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
6 months ago | |
| f1bd9049 |
Bump docker/build-push-action from 7.0.0 to 7.1.0 (#1388)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 1d988418 |
Bump docker/login-action from 4.0.0 to 4.1.0 (#1382)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 92080542 |
Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 (#1380)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| 4dacfcbe |
Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 (#1372)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
7 months ago | |
| b46fa3a2 |
Bump docker/login-action from 3.7.0 to 4.0.0 (#1369)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| 693820f9 |
Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#1368)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| c81da8ba |
Bump docker/build-push-action from 6.19.2 to 7.0.0 (#1367)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| 92ae8b82 |
Fix B106 reporting wrong line number on multiline function calls (#1360)
Co-authored-by: Claude Opus 4.6 <n****y@a****m> |
Fridayai700 <a****0@g****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| c8c8a55c | Lower version guard in check_ast_node to Python 3.12 (#1355) |
Robert C. Gray <g****0@g****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| 8f2f9284 |
Fix B615 false positive when revision is set via variable (#1358)
Co-authored-by: Claude Opus 4.6 <n****y@a****m> |
Fridayai700 <a****0@g****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| e27493f7 |
Include filename in nosec 'no failed test' warning (#1363)
Co-authored-by: Claude Opus 4.6 <n****y@a****m>, Claude Opus 4.6 <n****y@a****m>, pre-commit-ci[bot] <6****]@u****m> |
Fridayai700 <a****0@g****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| b69b3364 |
Fix B613 crash when reading from stdin (#1361)
Co-authored-by: Claude Opus 4.6 <n****y@a****m>, Claude Opus 4.6 <n****y@a****m>, pre-commit-ci[bot] <6****]@u****m> |
Fridayai700 <a****0@g****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| e418b798 |
Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
8 months ago | |
| ff646fd7 |
Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| c0def6c7 |
chore: fixed some typos in comments (#1351)
Co-authored-by: Jakob Guldberg Aaes <j****9@g****m> |
Jakob Stender Gulberg <j****9@g****m>
Committed by: GitHub <n****y@g****m> |
9 months ago | |
| 765f00d3 |
Limit B614 to torch.load deserializers (#1348)
Co-authored-by: Eric Brown <e****b@u****m> |
Chris DiBussolo <5****c@u****m>
Committed by: GitHub <n****y@g****m> |
10 months ago | |
| 06fbbab0 |
Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
10 months ago | |
| 36d6f3c0 | Update tox tests for Python 3.10 (#1346) |
Will Schlitzer <s****0@g****m>
Committed by: GitHub <n****y@g****m> |
10 months ago | |
| da0d3381 |
[pre-commit.ci] pre-commit autoupdate (#1341)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 649b9bdf |
Add check for hardcoded passwords in dicts. (#1338)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
Alan Verresen <d****v@a****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 3c561090 | Fix B608 to detect `VALUES(` without space (#1337) |
kfess <3****s@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| b790ce22 |
[pre-commit.ci] pre-commit autoupdate (#1335)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 0b73bbe5 |
Bump actions/checkout from 5 to 6 (#1334)
Co-authored-by: dependabot[bot] <4****]@u****m>, Eric Brown <e****b@u****m> Signed-off-by: dependabot[bot] <s****t@g****m>, dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| ea0d187d |
Check whether Constant value is str (#1333)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 8bf75945 |
Argparse Python 3.14 enhancements (#1331)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| a255dfae |
More Python version related fixes (#1327)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
11 months ago | |
| 3f07bb0d |
[pre-commit.ci] pre-commit autoupdate (#1324)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m>, Eric Brown <e****b@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| c8c3fb86 |
Drop support of end-of-life Python 3.9 (#1325)
Signed-off-by: Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| 5c303504 |
Support of Python 3.14 (#1323)
Signed-off-by: Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m>, Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
12 months ago | |
| e1ffdf63 |
Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#1317)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 176d4cac |
[pre-commit.ci] pre-commit autoupdate (#1315)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 2fc3e9c4 |
Bump docker/login-action from 3.5.0 to 3.6.0 (#1306)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 6a685467 | Fix typos (#1305) |
Maximilian <S****a@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 966be3c0 |
[pre-commit.ci] pre-commit autoupdate (#1303)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| a990c755 |
Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 (#1298)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| e2e13fc8 |
Bump actions/setup-python from 5 to 6 (#1296)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 7b0b1262 | Replace deprecated datetime.datetime.utcnow() (#1295) |
Stefan Zimmermann <u****z@l****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 3821234e |
Bump actions/checkout from 4 to 5 (#1292)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 46d4afee |
[pre-commit.ci] pre-commit autoupdate (#1291)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 0817d432 |
Bump docker/login-action from 3.4.0 to 3.5.0 (#1290)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 5a4c03a3 |
Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 (#1289)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
about 1 year ago | |
| 5a820865 |
Add instructions for Maintainers to create/publish a release (#1275)
Co-authored-by: Ian Stapleton Cordasco <g****v@g****m>, Ian Stapleton Cordasco <g****v@g****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 2d0b675b |
Huggingface revision pinning (#1281)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
Luke Hinds <l****s@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 4cd13370 |
Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 (#1284)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| ffed1bbf | added hint to FreeBSD package in doc/source/integrations.rst (#1282) |
daniel-mohr <8****r@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 090ba0f0 |
Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#1278)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 33c67898 |
Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 (#1279)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 23d269a6 |
Fix for publish to PyPI failure (#1273)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| e3ff8b53 | Fix the rendering of the CI/CD doc (#1274) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 61d1667e |
add github-actions documentation (#1172)
Co-authored-by: Luke Hinds <l****e@s****m>, Luke Hinds <l****s@g****m> |
Ata Tekeli <t****0@g****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| cea2b1cc |
Bump docker/build-push-action from 6.17.0 to 6.18.0 (#1268)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 2d577a6a |
[pre-commit.ci] pre-commit autoupdate (#1266)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| fa557cc2 |
Bump docker/build-push-action from 6.16.0 to 6.17.0 (#1265)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 2f0ab8bb |
Remove etc from list of temp paths (#1263)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| d8feade7 |
Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#1262)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 7979676e |
Bump docker/build-push-action from 6.15.0 to 6.16.0 (#1261)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 6c927320 | Use ubuntu latest for readthedocs build (#1260) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| af533cf0 |
Add a doc describing various integrations (#1253)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| b054c097 |
Fix up some of the warnings when building docs (#1258)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| c931679d | Use license property in lieu of classifier (#1259) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| de4f79b1 | Update documentation to cover `--severity-level` and `--confidence-level` (#1... |
Wil T <w****e@p****e>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| fbc9c4a1 |
Ensure the man page is built (#1257)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 1ab07887 |
Fix traceback from trojansource plugin (#1248)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 89bea99e | Bump bandit version in bug template (#1247) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| b983c276 |
Bump docker/login-action from 3.3.0 to 3.4.0 (#1245)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| b8ff0ef3 |
Bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (#1241)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 72522237 |
Bump docker/build-push-action from 6.14.0 to 6.15.0 (#1240)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| a82d07a7 |
Bump docker/build-push-action from 6.13.0 to 6.14.0 (#1238)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 2108a6fd |
Bump sigstore/cosign-installer from 3.8.0 to 3.8.1 (#1239)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| baf27c16 | Metadata: rename classifier to classifiers (#1237) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| c58c00a2 |
Add more random functions to B311 check (#1235)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
Ari Pollak <a****k@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 8ff25e07 |
Pytorch fix (#1231)
Co-authored-by: Eric Brown <e****b@u****m>, pre-commit-ci[bot] <6****]@u****m>, Eric Brown <e****b@u****m> |
Luke Hinds <l****e@s****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| def123ac |
B107: Skip None values in hardcoded password detection (#1232)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
Luke Hinds <l****e@s****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 00b1e954 | Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 (#1234) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| a324f420 | Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (#1233) |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| affd4fd1 |
Warn not error on an nonexistant test given (#1230)
Signed-off-by: Eric Brown <e****n@y****m> |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 5e3e6943 |
Add markupsafe.Markup XSS plugin (#1225)
Co-authored-by: Eric Brown <e****b@u****m>, Eric Brown <e****b@u****m> |
David Salvisberg <d****e@d****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 6133e08d | Update bug template to include latest released versions (#1218) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 7619cc4d |
[pre-commit.ci] pre-commit autoupdate (#1229)
Co-authored-by: pre-commit-ci[bot] <6****]@u****m> |
pre-commit-ci[bot] <6****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| 33487819 |
Bump docker/build-push-action from 6.12.0 to 6.13.0 (#1222)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
over 1 year ago | |
| ef0090fd |
Bump docker/build-push-action from 6.11.0 to 6.12.0 (#1221)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| e91b9116 |
Bump docker/build-push-action from 6.10.0 to 6.11.0 (#1220)
Co-authored-by: dependabot[bot] <4****]@u****m> Signed-off-by: dependabot[bot] <s****t@g****m> |
dependabot[bot] <4****]@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| c2c336d1 | Revert "Start testing with 3.14 alphas" (#1217) |
Eric Brown <e****b@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| e58379c5 |
Clarify "getting started" docs (#963)
Co-authored-by: Luke Hinds <7****s@u****m>, Eric Brown <e****b@u****m> |
David D Lowe <d****m@g****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago | |
| e4da0b35 |
Remove lxml (B320 & B410) from blacklist (#1212)
Co-authored-by: Ian Stapleton Cordasco <g****v@g****m>, Ian Stapleton Cordasco <g****v@g****m>, Eric Brown <e****b@u****m> |
Daniel Brown <d****n@u****m>
Committed by: GitHub <n****y@g****m> |
almost 2 years ago |