)]}'
{"id":"openinfra%2Frefstack~861632","triplet_id":"openinfra%2Frefstack~master~I91a18ef0fd4c300094553f7c3b21d8a745c057c7","project":"openinfra/refstack","branch":"master","topic":"fix","attention_set":{},"removed_from_attention_set":{"35229":{"account":{"_account_id":35229,"name":"Jakub Skunda","display_name":"jskunda","email":"jskunda@redhat.com","username":"jskunda"},"last_update":"2023-02-08 13:25:41.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I91a18ef0fd4c300094553f7c3b21d8a745c057c7","subject":"Fix security vulnerabilities using Bandit","status":"MERGED","created":"2022-10-17 13:46:10.000000000","updated":"2023-02-08 13:26:39.000000000","submitted":"2023-02-08 13:25:41.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"861632-fix","meta_rev_id":"71eff3b20dc9c6ffa8a434951d87114a0f6987b6","_number":861632,"virtual_id_number":861632,"owner":{"_account_id":35229,"name":"Jakub Skunda","display_name":"jskunda","email":"jskunda@redhat.com","username":"jskunda"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2023-02-08 13:25:40.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"all":[{"value":2,"date":"2023-02-08 13:12:36.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"all":[{"value":1,"date":"2023-02-08 13:12:36.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"}],"CC":[{"_account_id":30674,"name":"Lukas Piwowarski","email":"lpiwowar@redhat.com","username":"lukas-piwowarski"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2022-10-17 14:18:23.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2022-10-24 07:59:56.000000000","updated_by":{"_account_id":30674,"name":"Lukas Piwowarski","email":"lpiwowar@redhat.com","username":"lukas-piwowarski"},"reviewer":{"_account_id":30674,"name":"Lukas Piwowarski","email":"lpiwowar@redhat.com","username":"lukas-piwowarski"},"state":"CC"},{"updated":"2023-02-02 16:54:44.000000000","updated_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"reviewer":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"state":"CC"},{"updated":"2023-02-08 13:12:36.000000000","updated_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"reviewer":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"state":"REVIEWER"}],"messages":[{"id":"89690d18ce161a19a618de17e08ac5d9f3e945fa","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":35229,"name":"Jakub Skunda","display_name":"jskunda","email":"jskunda@redhat.com","username":"jskunda"},"date":"2022-10-17 13:46:10.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"8bef02da4132f04ae99ff45b92c7745f2b22e651","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2022-10-17 14:18:23.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\nhttps://zuul.opendev.org/t/openstack/buildset/0d6ddea11cf144d0952ac4a42f1fba7a\n\n- nodejs-run-lint https://zuul.opendev.org/t/openstack/build/3646bf67ad414eb08ed5b0d777f84dab : SUCCESS in 3m 55s\n- nodejs-run-test-browser https://zuul.opendev.org/t/openstack/build/82d207d13712484b99b40291ea517fa6 : SUCCESS in 6m 48s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/a7532605a0764039b84da9db487c7d86 : SUCCESS in 3m 59s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/fda0e6480db64f5baac25e8b26be3727 : SUCCESS in 3m 39s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/f5d8bb030511451fbaf8a9ca3d20d66b : SUCCESS in 4m 03s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/3f35cf444df64a639aff4bb6a545617b : SUCCESS in 4m 07s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/fe30dd5f18e24150acf4356edb1e00af : SUCCESS in 4m 03s (non-voting)\n- refstack-tox-functional https://zuul.opendev.org/t/openstack/build/8d5098dfffeb4a7b95ef78e041db31da : TIMED_OUT in 30m 56s\n- opendev-tox-docs https://zuul.opendev.org/t/openstack/build/5f8ff25f02764abb98be58cee654285d : SUCCESS in 3m 05s","accounts_in_message":[],"_revision_number":1},{"id":"81b00ada8dfe91ee37474e42e62dc27061b3e6ae","author":{"_account_id":30674,"name":"Lukas Piwowarski","email":"lpiwowar@redhat.com","username":"lukas-piwowarski"},"date":"2022-10-24 07:59:56.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"df5a702335d222c0a4ec5e123da324e2af2e2a76","author":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"date":"2023-02-02 16:54:44.000000000","message":"Patch Set 1:\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"c7822ed07d84c782cb3f99eaa81f407a27457fe8","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-02-02 17:06:47.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/4d86ceb63374482385f4d8fd9176600d\n\n- nodejs-run-lint https://zuul.opendev.org/t/openstack/build/0ecf34db43ce4cb1a60362aa49e7eae1 : SUCCESS in 4m 57s\n- nodejs-run-test-browser https://zuul.opendev.org/t/openstack/build/46b86a6b410242c39da5f49a749f23b9 : SUCCESS in 7m 55s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/da725736e5964187838c7d99b701cca5 : SUCCESS in 5m 14s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2c443a11f1a545059d25c7adc6d965dd : SUCCESS in 4m 35s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/4f167611560042a69996aaff876480c3 : SUCCESS in 4m 47s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/b26d36305c084e84ad085cbd8d3a9636 : SUCCESS in 5m 10s\n- openstack-tox-py310 https://zuul.opendev.org/t/openstack/build/da102858ab934ea2a7cde226ba24259e : SUCCESS in 5m 09s (non-voting)\n- refstack-tox-functional https://zuul.opendev.org/t/openstack/build/cc44927489214d27b053348b6db85362 : SUCCESS in 10m 24s\n- opendev-tox-docs https://zuul.opendev.org/t/openstack/build/4cb915ab6952492c94f7dfbd1e2f70e5 : SUCCESS in 3m 24s","accounts_in_message":[],"_revision_number":1},{"id":"060b8b2b9420c3a86fce6c347da1e2e0ad9c3047","author":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"},"date":"2023-02-08 13:12:36.000000000","message":"Patch Set 1: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":1},{"id":"df475bb12d1c79db681709755452fab9e985b497","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-02-08 13:12:59.000000000","message":"Patch Set 1: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":1},{"id":"7aa58b8d74612a15007ce67ecfc22f3a8f1d4617","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-02-08 13:25:40.000000000","message":"Patch Set 1: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/53045579b41242a7a13a59c91a3bfb2d\n\n- nodejs-run-lint https://zuul.opendev.org/t/openstack/build/7e4e31e265c94d6aa93592922b4a687d : SUCCESS in 3m 35s\n- nodejs-run-test-browser https://zuul.opendev.org/t/openstack/build/fd7bb8cada074254b93d6350b9afc123 : SUCCESS in 9m 53s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/7ab01eae4d9c499c88daab85730d1cd3 : SUCCESS in 3m 25s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/732abc902f4e4a59b10b1a24fff56067 : SUCCESS in 4m 30s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/1e0b4f4b6e9e4ba5a272a83976354749 : SUCCESS in 3m 53s\n- refstack-tox-functional https://zuul.opendev.org/t/openstack/build/79ef5141f3a74a8b84be93e26f3234f1 : SUCCESS in 8m 45s\n- opendev-tox-docs https://zuul.opendev.org/t/openstack/build/a04f6384a9774d4fa8bbe4c903cf3766 : SUCCESS in 2m 55s","accounts_in_message":[],"_revision_number":1},{"id":"386a05fa8287d27225bedf7c95c6496333f2f708","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-02-08 13:25:41.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":1},{"id":"71eff3b20dc9c6ffa8a434951d87114a0f6987b6","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2023-02-08 13:26:39.000000000","message":"Patch Set 1:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/de10524be489452887a173f4f6930aa1\n\n- opendev-promote-docs https://zuul.opendev.org/t/openstack/build/bbdedcae9886459aba043f11a0067c4d : SUCCESS in 37s","accounts_in_message":[],"_revision_number":1}],"current_revision_number":1,"current_revision":"5ba7c56a7fad31be119a24b0775f2faa5549f8de","revisions":{"5ba7c56a7fad31be119a24b0775f2faa5549f8de":{"kind":"REWORK","_number":1,"created":"2022-10-17 13:46:10.000000000","uploader":{"_account_id":35229,"name":"Jakub Skunda","display_name":"jskunda","email":"jskunda@redhat.com","username":"jskunda"},"ref":"refs/changes/32/861632/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openinfra/refstack","ref":"refs/changes/32/861632/1","commands":{"Checkout":"git fetch https://review.opendev.org/openinfra/refstack refs/changes/32/861632/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openinfra/refstack refs/changes/32/861632/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openinfra/refstack refs/changes/32/861632/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openinfra/refstack refs/changes/32/861632/1"}}},"commit":{"parents":[{"commit":"f222f3fb9540f0df4bf0cb8736c2470740659b18","subject":"Fix dash-separated options in setup.cfg warning","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openinfra/refstack/commit/f222f3fb9540f0df4bf0cb8736c2470740659b18"}]}],"author":{"name":"jskunda","email":"jskunda@redhat.com","date":"2022-10-17 13:31:51.000000000","tz":0},"committer":{"name":"jskunda","email":"jskunda@redhat.com","date":"2022-10-17 13:31:51.000000000","tz":0},"subject":"Fix security vulnerabilities using Bandit","message":"Fix security vulnerabilities using Bandit\n\nRefstack was using:\n-1024 bits long key[1]\n-hardcoded sql expressions[2]\n\nBoth of these was vulnerable to security attacks.\n\nInstead of 1024 bits keys refstack is now using 2048 bits keys.\nSql expressions were rewriten in the recomended way[3].\n\n[1] https://bandit.readthedocs.io/en/1.7.4/plugins/b505_weak_cryptographic_key.html\n[2] https://bandit.readthedocs.io/en/1.7.4/plugins/b608_hardcoded_sql_expressions.html\n[3] https://security.openstack.org/guidelines/dg_parameterize-database-queries.html\n\nChange-Id: I91a18ef0fd4c300094553f7c3b21d8a745c057c7\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openinfra/refstack/commit/5ba7c56a7fad31be119a24b0775f2faa5549f8de"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openinfra/refstack/commit/5ba7c56a7fad31be119a24b0775f2faa5549f8de"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":22873,"name":"Martin Kopec","email":"mkopec@redhat.com","username":"mkopec"}}]}],"submit_requirements":[]}