Use baseline for bandit (unhappy about subprocess calls)

mozilla-services · May 30, 2023 · 7723db3 · 7723db3
1 parent fa49710
commit 7723db3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.bandit.baseline b/.bandit.baseline
@@ -1,6 +1,6 @@
 {
   "errors": [],
-  "generated_at": "2023-05-25T13:27:12Z",
+  "generated_at": "2023-05-25T13:28:03Z",
   "metrics": {
     "_totals": {
       "CONFIDENCE.HIGH": 3,

diff --git a/Makefile b/Makefile
@@ -31,7 +31,7 @@ lint: $(INSTALL_STAMP)  ## Analyze code base
 	$(POETRY) run black --check checks tests $(NAME) --diff
 	$(POETRY) run flake8 --ignore=W503,E501 checks tests $(NAME)
 	$(POETRY) run mypy checks tests $(NAME) --ignore-missing-imports
-	$(POETRY) run bandit -r $(NAME) -s B608
+	$(POETRY) run bandit -r $(NAME) -b .bandit.baseline
 	$(POETRY) run poetry run detect-secrets-hook `git ls-files | grep -v poetry.lock` --baseline .secrets.baseline
 
 format: $(INSTALL_STAMP)  ## Format code base