@@ -92,9 +92,6 @@ ignore = [
9292"src/**" = [
9393 " S101" , # todo: Use of `assert` detected
9494 " S113" , # todo: Probable use of requests call without timeout
95- " S301" , # todo: `pickle` and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue
96- " S324" , # todo: Probable use of insecure hash functions in `hashlib`
97- " S403" , # todo: `pickle`, `cPickle`, `dill`, and `shelve` modules are possibly insecure
9895 " S404" , # todo: `subprocess` module is possibly insecure
9996 " S602" , # todo: `subprocess` call with `shell=True` identified, security issue
10097 " S603" , # todo: `subprocess` call: check for execution of untrusted input
@@ -106,18 +103,14 @@ ignore = [
106103"tests/**" = [
107104 " S101" , # Use of `assert` detected
108105 " S301" , # `pickle` and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue
109- " S113" , # todo: Probable use of requests call without timeout
110106 " S311" , # todo: Standard pseudo-random generators are not suitable for cryptographic purposes
111107 " S108" , # todo: Probable insecure usage of temporary file or directory: "/tmp/sys-customizations-sync"
112- " S202" , # Uses of `tarfile.extractall()`
113108 " S403" , # `pickle`, `cPickle`, `dill`, and `shelve` modules are possibly insecure
114109 " S404" , # `subprocess` module is possibly insecure
115110 " S602" , # todo: `subprocess` call with `shell=True` identified, security issue
116111 " S603" , # todo: `subprocess` call: check for execution of untrusted input
117112 " S605" , # todo: Starting a process with a shell: seems safe, but may be changed in the future; consider rewriting without `shell`
118113 " S607" , # todo: Starting a process with a partial executable path
119- " RET504" , # todo:Unnecessary variable assignment before `return` statement
120- " PT004" , # todo: Fixture `tmpdir_unittest_fixture` does not return anything, add leading underscore
121114 " PT012" , # todo: `pytest.raises()` block should contain a single simple statement
122115 " PT019" , # todo: Fixture `_` without value is injected as parameter, use `@pytest.mark.usefixtures` instead
123116]
0 commit comments