Merge pull request #6805 from hugovk/bandit

Run Bandit on CI via pre-commit
This commit is contained in:
Andrew Murray 2022-12-16 18:33:59 +11:00 committed by GitHub
commit 2f028ce77c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 9 additions and 2 deletions

View File

@ -3,7 +3,7 @@ repos:
rev: 22.12.0 rev: 22.12.0
hooks: hooks:
- id: black - id: black
args: ["--target-version", "py37"] args: [--target-version=py37]
# Only .py files, until https://github.com/psf/black/issues/402 resolved # Only .py files, until https://github.com/psf/black/issues/402 resolved
files: \.py$ files: \.py$
types: [] types: []
@ -13,6 +13,13 @@ repos:
hooks: hooks:
- id: isort - id: isort
- repo: https://github.com/PyCQA/bandit
rev: 1.7.4
hooks:
- id: bandit
args: [--severity-level=high]
files: ^src/
- repo: https://github.com/asottile/yesqa - repo: https://github.com/asottile/yesqa
rev: v1.4.0 rev: v1.4.0
hooks: hooks:

View File

@ -125,7 +125,7 @@ class Viewer:
path = options.pop("file") path = options.pop("file")
else: else:
raise TypeError("Missing required argument: 'path'") raise TypeError("Missing required argument: 'path'")
os.system(self.get_command(path, **options)) os.system(self.get_command(path, **options)) # nosec
return 1 return 1