gitea_admin/sientia-dataops-opc-ingestor
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

fix(gateway): suppress bandit B108 false positive on cert_cache_dir default

Browse Source 
'/tmp/opc-certs' is a spec'd, overridable-via-env default (already
noqa'd for ruff's S108); bandit needs its own '# nosec B108' since it
runs as a separate CI step and doesn't read ruff's noqa comments.
This commit is contained in:
PedroHMCosme
2026-09-22 16:01:54 -03:00
parent 49ae26c621
commit 5daabc341a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
ingestor/config.py
View File

@@ -23,7 +23,7 @@ class GatewayConfig:
grpc_enabled: bool = False grpc_enabled: bool = False
grpc_port: int = 50051 grpc_port: int = 50051
cert_bucket: str = 'sientia-dataops' cert_bucket: str = 'sientia-dataops'
cert_cache_dir: str = '/tmp/opc-certs' # noqa: S108 - default is spec'd, overridable via env cert_cache_dir: str = '/tmp/opc-certs' # noqa: S108 # nosec B108 - default is spec'd, overridable via env
write_timestamp: bool = True write_timestamp: bool = True
write_quality: bool = True write_quality: bool = True
write_min_pause_s: float = 0.0 write_min_pause_s: float = 0.0