derek.holloway
7502bf64a4
CodeQL / Analyze (actions) (push) Canceled after 0s
CodeQL / Analyze (python) (push) Canceled after 0s
pre-commit / pre-commit (push) Canceled after 0s
Multi-Arch CI / setup (push) Canceled after 0s
Publish build_manylinux_x86_64 images / publish_build_manylinux_x86_64 (push) Canceled after 0s
Setup (Multi-Arch) / setup (push) Canceled after 0s
Multi-Arch CI / Linux::${{ fromJSON(needs.setup.outputs.linux_build_config || '{}').build_variant_label || 'skip' }} (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish no_rocm_image_ubi10 image / publish_no_rocm_image_ubi10 (push) Canceled after 0s
Multi-Arch CI / Windows::${{ fromJSON(needs.setup.outputs.windows_build_config || '{}').build_variant_label || 'skip' }} (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Multi-Arch CI / Manifest Diff (push) Canceled after 0s
TheRock Manifest Diff Report / Generate Manifest Diff Report (push) Canceled after 0s
Multi-Arch CI / CI Summary (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04 (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04_ocl_rt images / publish_no_rocm_image_ubuntu24_04_ocl_rt (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_rocgdb (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04_rocgdb images / publish_no_rocm_image_ubuntu24_04_rocgdb (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_ocl_rt (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Unit Tests / Unit Tests :: ubuntu-24.04 (push) Canceled after 0s
Unit Tests / Unit Tests :: windows-2022 (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_media (push) Canceled after 0s
Unit Tests / Unit Tests Summary (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_openmpi (push) Canceled after 0s
49 lines
1.1 KiB
Plaintext
49 lines
1.1 KiB
Plaintext
# Bandit configuration for libhipcxx security scanning
|
|
# Added to prevent code injection vulnerabilities like SEC-00752
|
|
|
|
# Skip no tests
|
|
skips: []
|
|
|
|
# Check severity levels: low, medium, high
|
|
severity: medium
|
|
|
|
# Confidence levels: low, medium, high
|
|
confidence: medium
|
|
|
|
# Specific tests to run (B307 is eval usage)
|
|
tests:
|
|
- B102 # exec_used
|
|
- B103 # set_bad_file_permissions
|
|
- B108 # hardcoded_tmp_directory
|
|
- B201 # flask_debug_true
|
|
- B301 # pickle
|
|
- B302 # marshal
|
|
- B303 # md5
|
|
- B304 # ciphers
|
|
- B305 # cipher_modes
|
|
- B306 # mktemp_q
|
|
- B307 # eval
|
|
- B308 # mark_safe
|
|
- B310 # urllib_urlopen
|
|
- B311 # random
|
|
- B312 # telnetlib
|
|
- B313 # xml_bad_cElementTree
|
|
- B314 # xml_bad_ElementTree
|
|
- B315 # xml_bad_expatreader
|
|
- B316 # xml_bad_expatbuilder
|
|
- B317 # xml_bad_sax
|
|
- B318 # xml_bad_minidom
|
|
- B319 # xml_bad_pulldom
|
|
- B321 # ftplib
|
|
- B323 # unverified_context
|
|
- B324 # hashlib_new_insecure_functions
|
|
|
|
# Paths to scan
|
|
paths:
|
|
- .upstream-tests/
|
|
|
|
# Exclude patterns (use relative paths without leading slash)
|
|
exclude_dirs:
|
|
- .git
|
|
- __pycache__
|