Repository navigation
ci: fix astral-sh/setup-uv version comment tags to match v8.0.0 SHA #37
lhoupertintegration-tests.yml
on: pull_request
Matrix: integration-test
Validate results
8s
Annotations
23 errors, 31 warnings, and 9 notices
|
Test 12
Process completed with exit code 1.
|
|
Test 12
Process completed with exit code 1.
|
|
Test 12:
integration-tests/cases/12-uv-flat-bandit-only/app.py#L5
[B602] subprocess call with shell=True identified, security issue.
|
|
Test 02
Process completed with exit code 1.
|
|
Test 02
Process completed with exit code 1.
|
|
Test 02:
integration-tests/cases/02-requirements-src-bandit/src/app.py#L8
[B602] subprocess call with shell=True identified, security issue.
|
|
Test 03
Process completed with exit code 1.
|
|
Test 03
Process completed with exit code 1.
|
|
Test 03:
integration-tests/cases/03-requirements-multi-both/src/processor.py#L8
[B602] subprocess call with shell=True identified, security issue.
|
|
Test 14
Process completed with exit code 1.
|
|
Test 14
Process completed with exit code 1.
|
|
Test 06
Process completed with exit code 1.
|
|
Test 06
Process completed with exit code 1.
|
|
Test 06:
integration-tests/cases/06-uv-multi-bandit/scripts/digest.py#L8
[B324] Use of weak MD5 hash for security. Consider usedforsecurity=False
|
|
Test 10
Process completed with exit code 1.
|
|
Test 10
Process completed with exit code 1.
|
|
Test 10:
integration-tests/cases/10-pipenv-multi-bandit/src/handler.py#L8
[B602] subprocess call with shell=True identified, security issue.
|
|
Test 10:
integration-tests/cases/10-pipenv-multi-bandit/scripts/deploy.py#L8
[B602] subprocess call with shell=True identified, security issue.
|
|
Test 05
Process completed with exit code 1.
|
|
Test 05
Process completed with exit code 1.
|
|
Test 08
Process completed with exit code 1.
|
|
Test 08
Process completed with exit code 1.
|
|
Test 08:
integration-tests/cases/08-poetry-src-both/src/auth.py#L8
[B324] Use of weak MD5 hash for security. Consider usedforsecurity=False
|
|
Test 03
pip-audit: cryptography@38.0.0 — PYSEC-2024-225 (fix: 42.0.4)
|
|
Test 03
pip-audit: cryptography@38.0.0 — PYSEC-2024-225 (fix: 42.0.4)
|
|
Test 03
pip-audit: cryptography@38.0.0 — PYSEC-2023-254 (fix: 41.0.6)
|
|
Test 03
pip-audit: cryptography@38.0.0 — PYSEC-2023-254 (fix: 41.0.6)
|
|
Test 03
pip-audit: cryptography@38.0.0 — PYSEC-2023-11 (fix: 39.0.1)
|
|
Test 03
pip-audit: requests@2.25.0 — CVE-2026-25645 (fix: 2.33.0)
|
|
Test 03
pip-audit: requests@2.25.0 — CVE-2024-47081 (fix: 2.32.4)
|
|
Test 03
pip-audit: requests@2.25.0 — CVE-2024-35195 (fix: 2.32.0)
|
|
Test 03
pip-audit: requests@2.25.0 — PYSEC-2023-74 (fix: 2.31.0)
|
|
Test 03
pip-audit: requests@2.25.0 — PYSEC-2023-74 (fix: 2.31.0)
|
|
Test 06:
integration-tests/cases/06-uv-multi-bandit/src/parser.py#L8
[B506] Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().
|
|
Test 05
pip-audit: urllib3@1.26.20 — CVE-2025-66471 (fix: 2.6.0)
|
|
Test 05
pip-audit: urllib3@1.26.20 — CVE-2025-66418 (fix: 2.6.0)
|
|
Test 05
pip-audit: urllib3@1.26.20 — CVE-2025-50181 (fix: 2.5.0)
|
|
Test 05
pip-audit: requests@2.25.0 — CVE-2026-25645 (fix: 2.33.0)
|
|
Test 05
pip-audit: requests@2.25.0 — CVE-2024-47081 (fix: 2.32.4)
|
|
Test 05
pip-audit: requests@2.25.0 — CVE-2024-35195 (fix: 2.32.0)
|
|
Test 05
pip-audit: requests@2.25.0 — PYSEC-2023-74 (fix: 2.31.0)
|
|
Test 05
pip-audit: requests@2.25.0 — PYSEC-2023-74 (fix: 2.31.0)
|
|
Test 05
pip-audit: idna@2.10 — PYSEC-2024-60 (fix: 3.7)
|
|
Test 05
pip-audit: idna@2.10 — PYSEC-2024-60 (fix: 3.7)
|
|
Test 08
pip-audit: cryptography@38.0.0 — GHSA-jm77-qphf-c4w8 (fix: 41.0.3)
|
|
Test 08
pip-audit: cryptography@38.0.0 — GHSA-5cpq-8wj7-hf2v (fix: 41.0.0)
|
|
Test 08
pip-audit: cryptography@38.0.0 — CVE-2023-0286 (fix: 39.0.1)
|
|
Test 08
pip-audit: cryptography@38.0.0 — GHSA-39hc-v87j-747x (fix: 38.0.3)
|
|
Test 08
pip-audit: cryptography@38.0.0 — PYSEC-2023-11 (fix: 39.0.1)
|
|
Test 08
pip-audit: cryptography@38.0.0 — PYSEC-2024-225 (fix: 42.0.4)
|
|
Test 08
pip-audit: cryptography@38.0.0 — PYSEC-2024-225 (fix: 42.0.4)
|
|
Test 08
pip-audit: cryptography@38.0.0 — PYSEC-2023-254 (fix: 41.0.6)
|
|
Test 08
pip-audit: cryptography@38.0.0 — PYSEC-2023-254 (fix: 41.0.6)
|
|
Test 08
pip-audit: cryptography@38.0.0 — PYSEC-2023-11 (fix: 39.0.1)
|
|
Test 12:
integration-tests/cases/12-uv-flat-bandit-only/app.py#L2
[B404] Consider possible security implications associated with the subprocess module.
|
|
Test 02:
integration-tests/cases/02-requirements-src-bandit/src/app.py#L14
[B105] Possible hardcoded password: 'supersecret123'
|
|
Test 02:
integration-tests/cases/02-requirements-src-bandit/src/app.py#L2
[B404] Consider possible security implications associated with the subprocess module.
|
|
Test 03:
integration-tests/cases/03-requirements-multi-both/src/processor.py#L2
[B404] Consider possible security implications associated with the subprocess module.
|
|
Test 03:
integration-tests/cases/03-requirements-multi-both/scripts/run.py#L7
[B105] Possible hardcoded password: 'hardcoded_db_pass'
|
|
Test 14:
integration-tests/cases/14-uv-low-threshold/app.py#L4
[B101] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
|
|
Test 10:
integration-tests/cases/10-pipenv-multi-bandit/src/handler.py#L2
[B404] Consider possible security implications associated with the subprocess module.
|
|
Test 10:
integration-tests/cases/10-pipenv-multi-bandit/scripts/deploy.py#L2
[B404] Consider possible security implications associated with the subprocess module.
|
|
Test 08:
integration-tests/cases/08-poetry-src-both/src/auth.py#L14
[B105] Possible hardcoded password: 'dev_secret_token_abc123'
|