fix(gateway): suppress bandit B108 false positive on cert_cache_dir default
'/tmp/opc-certs' is a spec'd, overridable-via-env default (already noqa'd for ruff's S108); bandit needs its own '# nosec B108' since it runs as a separate CI step and doesn't read ruff's noqa comments.
This commit is contained in:
@@ -23,7 +23,7 @@ class GatewayConfig:
|
||||
grpc_enabled: bool = False
|
||||
grpc_port: int = 50051
|
||||
cert_bucket: str = 'sientia-dataops'
|
||||
cert_cache_dir: str = '/tmp/opc-certs' # noqa: S108 - default is spec'd, overridable via env
|
||||
cert_cache_dir: str = '/tmp/opc-certs' # noqa: S108 # nosec B108 - default is spec'd, overridable via env
|
||||
write_timestamp: bool = True
|
||||
write_quality: bool = True
|
||||
write_min_pause_s: float = 0.0
|
||||
|
||||
Reference in New Issue
Block a user