[GRASS-git] [OSGeo/grass] f85545: checks: Exclude vendored code from bandit scanning...

Corey White noreply at github.com
Tue Jul 14 22:19:22 PDT 2026


  Branch: refs/heads/main
  Home:   https://github.com/OSGeo/grass
  Commit: f85545aac20250111392dfc30cbef97c784e49be
      https://github.com/OSGeo/grass/commit/f85545aac20250111392dfc30cbef97c784e49be
  Author: Corey White <smortopahri at gmail.com>
  Date:   2026-07-15 (Wed, 15 Jul 2026)

  Changed paths:
    M pyproject.toml

  Log Message:
  -----------
  checks: Exclude vendored code from bandit scanning (#7699)

Bandit scans the vendored ctypesgen copy in
python/libgrass_interface_generator and the vendored PLY copy in
python/grass/temporal/ply, reporting 13 findings (B102, B403, B605,
B307, B602, B607) in code GRASS does not maintain. Exclude both
directories, matching the existing pylint ignore-paths and formatter
extend-exclude entries.



To unsubscribe from these emails, change your notification settings at https://github.com/OSGeo/grass/settings/notifications


More information about the grass-commit mailing list