[QGIS-Developer] Plugin falsely blocked by Bandit Security Analysis

[Jürgen E. Fischer]

Hi Johannes,

On Sun, 09. Aug 2026 at 05:08:17 +0000, Johannes Jenkner via QGIS-Developer wrote:
> Is the there anything I can do to unblock the plugin version and
> simultaneously keep the random numbers as essential part of my plugin
> algorithm?

You can add "# nosec" to the "offending" lines (and you should also move
the replacement arguments outside of the tr call).

Jürgen

-- 
Jürgen E. Fischer           norBIT GmbH             Tel. +49-4931-918175-31
Dipl.-Inf. (FH)             Rheinstraße 13          Fax. +49-4931-918175-50
Software Engineer           D-26506 Norden            https://www.norbit.de
QGIS release manager (PSC)  Germany                  Matrix: @jef:osgeo.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/qgis-developer/attachments/20260809/be78c977/attachment.sig>