)]}'
{"README.md":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"4edff9ccad390c4232da159e2203f00a350aa052","unresolved":false,"context_lines":[{"line_number":20,"context_line":"Bandit is distributed as an installable package.  To clone and install in a"},{"line_number":21,"context_line":"Python virtual environment:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"    $ git clone ssh://[user]@review.openstack.org:29418/stackforge/bandit.git"},{"line_number":24,"context_line":"    $ cd bandit"},{"line_number":25,"context_line":"    $ virtualenv venv"},{"line_number":26,"context_line":"    $ source venv/bin/activate"}],"source_content_type":"text/x-gfm","patch_set":1,"id":"5a890539_7eb0998b","line":23,"updated":"2014-11-21 00:46:50.000000000","message":"Shouldn\u0027t we just point to the stackforge git? https://github.com/stackforge/bandit.git","commit_id":"245133c810bf563318ca59b78ea2830e4be1fd0c"},{"author":{"_account_id":11029,"name":"Jamie Finnigan","email":"jamiefinnigan@gmail.com","username":"jamiefinnigan"},"change_message_id":"909858ff52c3f549438c83f332e0cd0b7b42f369","unresolved":false,"context_lines":[{"line_number":20,"context_line":"Bandit is distributed as an installable package.  To clone and install in a"},{"line_number":21,"context_line":"Python virtual environment:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"    $ git clone ssh://[user]@review.openstack.org:29418/stackforge/bandit.git"},{"line_number":24,"context_line":"    $ cd bandit"},{"line_number":25,"context_line":"    $ virtualenv venv"},{"line_number":26,"context_line":"    $ source venv/bin/activate"}],"source_content_type":"text/x-gfm","patch_set":1,"id":"5a890539_8be7c03f","line":23,"in_reply_to":"5a890539_7eb0998b","updated":"2014-11-21 03:48:09.000000000","message":"I went back on forth on this one when I was writing it .. my thought was that using gerrit makes it easier for someone to start contributing, but of course that requires setting up a user etc.  I\u0027ll change it up to point to stackforge.","commit_id":"245133c810bf563318ca59b78ea2830e4be1fd0c"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"4edff9ccad390c4232da159e2203f00a350aa052","unresolved":false,"context_lines":[{"line_number":150,"context_line":"Green Tree Snakes - the missing Python AST docs:"},{"line_number":151,"context_line":"http://greentreesnakes.readthedocs.org/en/latest/"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"Of specific node, the various types of AST nodes that Bandit currently covers"},{"line_number":154,"context_line":"or could be extended to cover:"},{"line_number":155,"context_line":"http://greentreesnakes.readthedocs.org/en/latest/nodes.html"},{"line_number":156,"context_line":""}],"source_content_type":"text/x-gfm","patch_set":1,"id":"5a890539_5e483d87","line":153,"updated":"2014-11-21 00:46:50.000000000","message":"This sentence is a little unclear, let\u0027s reword maybe something like: \"Good description of the AST nodes which Bandit covers or could be extended to cover: http://greentreesnakes.readthedocs.org/en/latest/nodes.html\"","commit_id":"245133c810bf563318ca59b78ea2830e4be1fd0c"},{"author":{"_account_id":11029,"name":"Jamie Finnigan","email":"jamiefinnigan@gmail.com","username":"jamiefinnigan"},"change_message_id":"909858ff52c3f549438c83f332e0cd0b7b42f369","unresolved":false,"context_lines":[{"line_number":150,"context_line":"Green Tree Snakes - the missing Python AST docs:"},{"line_number":151,"context_line":"http://greentreesnakes.readthedocs.org/en/latest/"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"Of specific node, the various types of AST nodes that Bandit currently covers"},{"line_number":154,"context_line":"or could be extended to cover:"},{"line_number":155,"context_line":"http://greentreesnakes.readthedocs.org/en/latest/nodes.html"},{"line_number":156,"context_line":""}],"source_content_type":"text/x-gfm","patch_set":1,"id":"5a890539_abb9dc16","line":153,"in_reply_to":"5a890539_5e483d87","updated":"2014-11-21 03:48:09.000000000","message":"Not part of my commit but good call, I\u0027ll edit this in the next patchset as well.","commit_id":"245133c810bf563318ca59b78ea2830e4be1fd0c"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"cd4daf63b35417945d4d9e5e3b1dd311db861e82","unresolved":false,"context_lines":[{"line_number":20,"context_line":"Bandit is distributed as an installable package.  To clone and install in a"},{"line_number":21,"context_line":"Python virtual environment:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"    $ git clone https://github.com/stackforge/bandit.git"},{"line_number":24,"context_line":"    $ cd bandit"},{"line_number":25,"context_line":"    $ virtualenv venv"},{"line_number":26,"context_line":"    $ source venv/bin/activate"}],"source_content_type":"text/x-gfm","patch_set":2,"id":"5a890539_9d90d344","line":23,"updated":"2014-11-21 16:11:49.000000000","message":"what about git.openstack.org which is where I usually clone $everything from ?","commit_id":"fb97a865655ab7d6fff877a26ef3b3d9c69d2189"},{"author":{"_account_id":11029,"name":"Jamie Finnigan","email":"jamiefinnigan@gmail.com","username":"jamiefinnigan"},"change_message_id":"af6fdffb1bfe016433d03b883f5478ff4f5a10dd","unresolved":false,"context_lines":[{"line_number":20,"context_line":"Bandit is distributed as an installable package.  To clone and install in a"},{"line_number":21,"context_line":"Python virtual environment:"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"    $ git clone https://github.com/stackforge/bandit.git"},{"line_number":24,"context_line":"    $ cd bandit"},{"line_number":25,"context_line":"    $ virtualenv venv"},{"line_number":26,"context_line":"    $ source venv/bin/activate"}],"source_content_type":"text/x-gfm","patch_set":2,"id":"5a890539_b13858a1","line":23,"in_reply_to":"5a890539_9d90d344","updated":"2014-11-21 18:10:10.000000000","message":"Done","commit_id":"fb97a865655ab7d6fff877a26ef3b3d9c69d2189"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"502e558192c3dd2ae28196e4a6a0e34d9c338bbc","unresolved":false,"context_lines":[{"line_number":44,"context_line":"    $ bandit examples/*.py -n 3 -lll"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Example usage across the examples/ directory, showing one line of context and"},{"line_number":47,"context_line":"running only tests in the ShellInjection profile:"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"    $ bandit examples/*.py -n 1 -p ShellInjection"},{"line_number":50,"context_line":""}],"source_content_type":"text/x-gfm","patch_set":2,"id":"5a890539_63aaa672","line":47,"updated":"2014-11-21 17:10:40.000000000","message":"It may be useful to document where the profiles are located, or which are allowed - I\u0027m not seeing \u0027ShellInjection\u0027 (or other profiles) anywhere.","commit_id":"fb97a865655ab7d6fff877a26ef3b3d9c69d2189"},{"author":{"_account_id":11029,"name":"Jamie Finnigan","email":"jamiefinnigan@gmail.com","username":"jamiefinnigan"},"change_message_id":"af6fdffb1bfe016433d03b883f5478ff4f5a10dd","unresolved":false,"context_lines":[{"line_number":44,"context_line":"    $ bandit examples/*.py -n 3 -lll"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Example usage across the examples/ directory, showing one line of context and"},{"line_number":47,"context_line":"running only tests in the ShellInjection profile:"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"    $ bandit examples/*.py -n 1 -p ShellInjection"},{"line_number":50,"context_line":""}],"source_content_type":"text/x-gfm","patch_set":2,"id":"5a890539_f15580c2","line":47,"in_reply_to":"5a890539_63aaa672","updated":"2014-11-21 18:10:10.000000000","message":"Profiles are mentioned in the \"Configuration\" section .. \"The default configuration file is bandit.yaml.  This [...] allows the creation of separate test profiles to include or exclude specific tests when Bandit is run.\"\n\nWe could expand on this but I\u0027d like to do that as a separate commit.","commit_id":"fb97a865655ab7d6fff877a26ef3b3d9c69d2189"}]}