PyCharm Python Security Scanner #470
msoedovsecurity.yml
on: schedule
Execute the pycharm-security action
1m 10s
Annotations
3 warnings
|
Execute the pycharm-security action:
file:///github/workspace/validex/utils.py#L23
PIC100: Loading serialized data with the pickle module can expose arbitrary code execution using the __reduce__ method. Found in 'pickle.load(f)'.
|
|
Execute the pycharm-security action:
file:///github/workspace/validex/utils.py#L15
HL101: MD5, SHA-1, RIPEMD-160, Whirlpool, and the SHA-256 / SHA-512 hash algorithms are all vulnerable to length-extension attacks and should not be used for obfuscating or protecting data. Use within a HMAC is not vulnerable. Found in 'hashlib.sha256(args_kwargs_str.encode())'.
|
|
Execute the pycharm-security action
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|