)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a7e114de69e277ff99a44569d2aefc16794a0a6f","unresolved":false,"context_lines":[{"line_number":14,"context_line":"- Alphabetize the list of tests so they\u0027re easier to find."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"- Enable more checks that work and paramiko_injection test from"},{"line_number":17,"context_line":"  new bandit."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"- Document why some checks are not included."},{"line_number":20,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":5,"id":"1a4dcd0f_631d3fbd","line":17,"updated":"2015-08-12 13:39:37.000000000","message":"new bandit version? \n\nWhen we update our bandit config and we reference \"new things\" in bandit, should be include a version number from bandit?","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"bae9bf43ef75578c1388d30c8ddfd3945bc4139c","unresolved":false,"context_lines":[{"line_number":14,"context_line":"- Alphabetize the list of tests so they\u0027re easier to find."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"- Enable more checks that work and paramiko_injection test from"},{"line_number":17,"context_line":"  new bandit."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"- Document why some checks are not included."},{"line_number":20,"context_line":""}],"source_content_type":"text/x-gerrit-commit-message","patch_set":5,"id":"1a4dcd0f_8d72a310","line":17,"in_reply_to":"1a4dcd0f_631d3fbd","updated":"2015-08-13 21:49:05.000000000","message":"Done","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"b4d55c75fdd259de4904d7cd8786c70c34408f58","unresolved":false,"context_lines":[{"line_number":15,"context_line":"1) Copied the latest bandit config stuff from the top of the file."},{"line_number":16,"context_line":"2) Copied the list of all tests from the sample \"All\" profile:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"   - Left disabled the new tests that we weren\u0027t running, these will"},{"line_number":19,"context_line":"     be enabled if they work, marked with TODO."},{"line_number":20,"context_line":"   - Removed crypto_random and shell_injection since these are not"},{"line_number":21,"context_line":"     in the list of all tests anymore."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":10,"id":"ba15a1d1_7c9f7503","line":18,"updated":"2015-09-22 13:02:13.000000000","message":"\"Left the new tests that we weren\u0027t running disabled\"?","commit_id":"71012073e04a91d481439d86e8d70fb42a0dc9b5"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"aebd100bc71e33b259dbbf80a1533fa8471e09b0","unresolved":false,"context_lines":[{"line_number":15,"context_line":"1) Copied the latest bandit config stuff from the top of the file."},{"line_number":16,"context_line":"2) Copied the list of all tests from the sample \"All\" profile:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"   - Left disabled the new tests that we weren\u0027t running, these will"},{"line_number":19,"context_line":"     be enabled if they work, marked with TODO."},{"line_number":20,"context_line":"   - Removed crypto_random and shell_injection since these are not"},{"line_number":21,"context_line":"     in the list of all tests anymore."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":10,"id":"ba15a1d1_3f4c8f41","line":18,"in_reply_to":"ba15a1d1_7c9f7503","updated":"2015-09-22 13:10:11.000000000","message":"Done","commit_id":"71012073e04a91d481439d86e8d70fb42a0dc9b5"}],"bandit.yaml":[{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"951ebaf13082cd773dc8ea9cd7996f8e59f019bb","unresolved":false,"context_lines":[{"line_number":34,"context_line":"            - blacklist_calls"},{"line_number":35,"context_line":"            - blacklist_imports"},{"line_number":36,"context_line":"            - crypto_random"},{"line_number":37,"context_line":"            - hardcoded_password"},{"line_number":38,"context_line":"            - hardcoded_sql_expressions"},{"line_number":39,"context_line":"            - request_with_no_cert_validation"},{"line_number":40,"context_line":"            - exec_used"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_0a4cdf6e","line":37,"updated":"2015-06-22 22:24:33.000000000","message":"\"hardcoded_password\" and \"hardcoded_sql_expressions\" are very prone to false positives, that\u0027s why I didn\u0027t include them before.\n\nI didn\u0027t include crypto_random because in some cases non cryptographic random numbers are fine, and Bandit doesn\u0027t have any way to do know, which would force people to put a #nosec in their code anywhere they are using non cryptographically generated random.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"79f579a67f9f21fd27b276f36e4ded2e8d14942b","unresolved":false,"context_lines":[{"line_number":34,"context_line":"            - blacklist_calls"},{"line_number":35,"context_line":"            - blacklist_imports"},{"line_number":36,"context_line":"            - crypto_random"},{"line_number":37,"context_line":"            - hardcoded_password"},{"line_number":38,"context_line":"            - hardcoded_sql_expressions"},{"line_number":39,"context_line":"            - request_with_no_cert_validation"},{"line_number":40,"context_line":"            - exec_used"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_4e99ad78","line":37,"in_reply_to":"fa32b979_0a4cdf6e","updated":"2015-06-28 15:40:50.000000000","message":"Removed \"hardcoded_password\" and \"hardcoded_sql_expressions\" from this list and documented why exluded.\n\nI\u0027d like to leave crypto_random because for keystone I think we should make developers think about whether it\u0027s used in crypto or non-crypto context.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"951ebaf13082cd773dc8ea9cd7996f8e59f019bb","unresolved":false,"context_lines":[{"line_number":75,"context_line":"            qualnames: [yaml.load]"},{"line_number":76,"context_line":"            message: \"Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().\""},{"line_number":77,"context_line":"        - urllib_urlopen:"},{"line_number":78,"context_line":"            qualnames: [urllib.urlopen, urllib.urlretrieve, urllib.URLopener, urllib.FancyURLopener, urllib2.urlopen, urllib2.Request]"},{"line_number":79,"context_line":"            message: \"Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.\""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"shell_injection:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_8a7c6f73","line":78,"updated":"2015-06-22 22:24:33.000000000","message":"I\u0027d also add the new Paramiko check, you can find the definition in stackforge Bandit.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"79f579a67f9f21fd27b276f36e4ded2e8d14942b","unresolved":false,"context_lines":[{"line_number":75,"context_line":"            qualnames: [yaml.load]"},{"line_number":76,"context_line":"            message: \"Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().\""},{"line_number":77,"context_line":"        - urllib_urlopen:"},{"line_number":78,"context_line":"            qualnames: [urllib.urlopen, urllib.urlretrieve, urllib.URLopener, urllib.FancyURLopener, urllib2.urlopen, urllib2.Request]"},{"line_number":79,"context_line":"            message: \"Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.\""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"shell_injection:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_aeae397f","line":78,"in_reply_to":"fa32b979_8a7c6f73","updated":"2015-06-28 15:40:50.000000000","message":"Travis - where do I find the definition?","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"4a7d9e407b6296333fb1bf7883a8cd7e80097149","unresolved":false,"context_lines":[{"line_number":75,"context_line":"            qualnames: [yaml.load]"},{"line_number":76,"context_line":"            message: \"Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().\""},{"line_number":77,"context_line":"        - urllib_urlopen:"},{"line_number":78,"context_line":"            qualnames: [urllib.urlopen, urllib.urlretrieve, urllib.URLopener, urllib.FancyURLopener, urllib2.urlopen, urllib2.Request]"},{"line_number":79,"context_line":"            message: \"Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.\""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"shell_injection:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_abb375e8","line":78,"in_reply_to":"fa32b979_8a7c6f73","updated":"2015-06-23 00:32:24.000000000","message":"projects won\u0027t be able to make use of the paramiko check until bandit does another PyPi release.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"31ad2f845fc346c05bde6b96a2a42161d6ace656","unresolved":false,"context_lines":[{"line_number":75,"context_line":"            qualnames: [yaml.load]"},{"line_number":76,"context_line":"            message: \"Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().\""},{"line_number":77,"context_line":"        - urllib_urlopen:"},{"line_number":78,"context_line":"            qualnames: [urllib.urlopen, urllib.urlretrieve, urllib.URLopener, urllib.FancyURLopener, urllib2.urlopen, urllib2.Request]"},{"line_number":79,"context_line":"            message: \"Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.\""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"shell_injection:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_66190688","line":78,"in_reply_to":"fa32b979_abb375e8","updated":"2015-06-23 13:54:57.000000000","message":"I don\u0027t think that\u0027s true because it\u0027s defined in config, the code is included as part of the \"blacklist_calls\" plugin.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"5648aeeca7bbb1114afe68585b8c32f65e3205a7","unresolved":false,"context_lines":[{"line_number":75,"context_line":"            qualnames: [yaml.load]"},{"line_number":76,"context_line":"            message: \"Use of unsafe yaml load. Allows instantiation of arbitrary objects. Consider yaml.safe_load().\""},{"line_number":77,"context_line":"        - urllib_urlopen:"},{"line_number":78,"context_line":"            qualnames: [urllib.urlopen, urllib.urlretrieve, urllib.URLopener, urllib.FancyURLopener, urllib2.urlopen, urllib2.Request]"},{"line_number":79,"context_line":"            message: \"Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.\""},{"line_number":80,"context_line":""},{"line_number":81,"context_line":"shell_injection:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"ba3cc151_d9ce2283","line":78,"in_reply_to":"fa32b979_aeae397f","updated":"2015-06-29 13:58:55.000000000","message":"Here: https://github.com/stackforge/bandit/blob/master/bandit/config/bandit.yaml#L79","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"951ebaf13082cd773dc8ea9cd7996f8e59f019bb","unresolved":false,"context_lines":[{"line_number":101,"context_line":"        - info_libs:"},{"line_number":102,"context_line":"            imports: [pickle, cPickle, Crypto]"},{"line_number":103,"context_line":"            level: INFO"},{"line_number":104,"context_line":"            message: \"Consider possible security implications associated with {module} module.\""},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"hardcoded_password:"},{"line_number":107,"context_line":"    word_list: \"wordlist/default-passwords\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_4a974790","line":104,"updated":"2015-06-22 22:24:33.000000000","message":"Info on a gate will still cause a failure, unless you set the -ll threshold.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"79f579a67f9f21fd27b276f36e4ded2e8d14942b","unresolved":false,"context_lines":[{"line_number":101,"context_line":"        - info_libs:"},{"line_number":102,"context_line":"            imports: [pickle, cPickle, Crypto]"},{"line_number":103,"context_line":"            level: INFO"},{"line_number":104,"context_line":"            message: \"Consider possible security implications associated with {module} module.\""},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"hardcoded_password:"},{"line_number":107,"context_line":"    word_list: \"wordlist/default-passwords\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"fa32b979_ce837d02","line":104,"in_reply_to":"fa32b979_4a974790","updated":"2015-06-28 15:40:50.000000000","message":"good. don\u0027t use pickle.","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"5648aeeca7bbb1114afe68585b8c32f65e3205a7","unresolved":false,"context_lines":[{"line_number":101,"context_line":"        - info_libs:"},{"line_number":102,"context_line":"            imports: [pickle, cPickle, Crypto]"},{"line_number":103,"context_line":"            level: INFO"},{"line_number":104,"context_line":"            message: \"Consider possible security implications associated with {module} module.\""},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"hardcoded_password:"},{"line_number":107,"context_line":"    word_list: \"wordlist/default-passwords\""}],"source_content_type":"text/x-yaml","patch_set":1,"id":"ba3cc151_f9cbe670","line":104,"in_reply_to":"fa32b979_ce837d02","updated":"2015-06-29 13:58:55.000000000","message":";)","commit_id":"9d41a3aa6766067d33ca64e35bec25b8d10550d9"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"fcd2fca82f78457796f9f458d885df217b05fd00","unresolved":false,"context_lines":[{"line_number":21,"context_line":"# globs of files which should be analyzed"},{"line_number":22,"context_line":"include:"},{"line_number":23,"context_line":"    - \u0027*.py\u0027"},{"line_number":24,"context_line":"    - \u0027*.pyw\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"# a list of strings, which if found in the path will cause files to be excluded"},{"line_number":27,"context_line":"# for example /tests/ - to remove all all files in tests directory"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"ba3cc151_b117a6a2","line":24,"updated":"2015-06-29 19:27:41.000000000","message":"You could probably remove this since Keystone doesn\u0027t have any pyw files.","commit_id":"3098f56817940e32d7f6198058404ceaf453a83a"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"55dc5b699f8bb700dcdc638b19d77be4bccacf27","unresolved":false,"context_lines":[{"line_number":21,"context_line":"# globs of files which should be analyzed"},{"line_number":22,"context_line":"include:"},{"line_number":23,"context_line":"    - \u0027*.py\u0027"},{"line_number":24,"context_line":"    - \u0027*.pyw\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"# a list of strings, which if found in the path will cause files to be excluded"},{"line_number":27,"context_line":"# for example /tests/ - to remove all all files in tests directory"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"ba3cc151_e3b0058e","line":24,"in_reply_to":"ba3cc151_b117a6a2","updated":"2015-06-29 19:54:00.000000000","message":"Done","commit_id":"3098f56817940e32d7f6198058404ceaf453a83a"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"fcd2fca82f78457796f9f458d885df217b05fd00","unresolved":false,"context_lines":[{"line_number":45,"context_line":"            - subprocess_popen_with_shell_equals_true"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"            # These are not used because they are very prone to false positives"},{"line_number":48,"context_line":"            # - hardcoded_password"},{"line_number":49,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"ba3cc151_b1c1e6e6","line":48,"updated":"2015-06-29 19:27:41.000000000","message":"Currently by default, this plugin doesn\u0027t find anything because wordlist/default-passwords file isn\u0027t bundled with bandit.\n\nhttps://bugs.launchpad.net/bandit/+bug/1451575","commit_id":"3098f56817940e32d7f6198058404ceaf453a83a"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"55dc5b699f8bb700dcdc638b19d77be4bccacf27","unresolved":false,"context_lines":[{"line_number":45,"context_line":"            - subprocess_popen_with_shell_equals_true"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"            # These are not used because they are very prone to false positives"},{"line_number":48,"context_line":"            # - hardcoded_password"},{"line_number":49,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":3,"id":"ba3cc151_0323a9be","line":48,"in_reply_to":"ba3cc151_b1c1e6e6","updated":"2015-06-29 19:54:00.000000000","message":"Done","commit_id":"3098f56817940e32d7f6198058404ceaf453a83a"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"900724ee9daef5aee8898a797ad9ff9e79626325","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"3a50d1a3_dacc2237","updated":"2015-07-29 04:39:37.000000000","message":"Might want to grab latest bandit.yaml example and merge the diffs.  Been several fixes since.","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"40c9dbcb1385577bd24dd60498400cd723710042","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"3a50d1a3_400c473b","in_reply_to":"3a50d1a3_8a34b0fb","updated":"2015-07-30 17:08:36.000000000","message":"True, technically you have to work with any version greater than 0.10.1.","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"88530ddbec6d63afd5ea9282b5cc9d70a75f7489","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":5,"id":"3a50d1a3_8a34b0fb","in_reply_to":"3a50d1a3_dacc2237","updated":"2015-07-30 16:47:59.000000000","message":"this is using the minimum version of bandit that\u0027s in keystone\u0027s requirements. We don\u0027t use the latest since that\u0027s not what we run with.","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"900724ee9daef5aee8898a797ad9ff9e79626325","unresolved":false,"context_lines":[{"line_number":47,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"            # Not working because wordlist/default-passwords file not bundled,"},{"line_number":50,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":51,"context_line":"            # - hardcoded_password"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"3a50d1a3_fa1ebeb9","line":50,"updated":"2015-07-29 04:39:37.000000000","message":"This is now fixed with https://review.openstack.org/#/c/201053/\n\nSo you could probably reenable as long as you\u0027re no longer getting false positives.","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"40c9dbcb1385577bd24dd60498400cd723710042","unresolved":false,"context_lines":[{"line_number":47,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"            # Not working because wordlist/default-passwords file not bundled,"},{"line_number":50,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":51,"context_line":"            # - hardcoded_password"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"3a50d1a3_dd5cc04e","line":50,"in_reply_to":"3a50d1a3_2ab47c80","updated":"2015-07-30 17:08:36.000000000","message":"Good point. My bad.","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"306175126e85516c8e805f5ff7ba06b612e0aaed","unresolved":false,"context_lines":[{"line_number":47,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"            # Not working because wordlist/default-passwords file not bundled,"},{"line_number":50,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":51,"context_line":"            # - hardcoded_password"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"3a50d1a3_2ab47c80","line":50,"in_reply_to":"3a50d1a3_fa1ebeb9","updated":"2015-07-30 16:46:34.000000000","message":"According to https://bugs.launchpad.net/bandit/+bug/1451575 the fix for this isn\u0027t released yet, so we can\u0027t use it.","commit_id":"60d591620c50368193b023007f2c0b12b5f5e178"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"070485e2c22eeff039e59dc1b639269c4acf4482","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":7,"id":"fa1b9901_f8e37403","updated":"2015-08-19 14:50:26.000000000","message":"I think you can refresh this file with the latest example bandit.yaml from 0.13.2 of bandit.","commit_id":"378afd201215a238ce725e9146a8639f4ed35bc4"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"070485e2c22eeff039e59dc1b639269c4acf4482","unresolved":false,"context_lines":[{"line_number":47,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":48,"context_line":""},{"line_number":49,"context_line":"            # Not working because wordlist/default-passwords file not bundled,"},{"line_number":50,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":51,"context_line":"            # - hardcoded_password"},{"line_number":52,"context_line":""},{"line_number":53,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":7,"id":"fa1b9901_583860a0","line":50,"updated":"2015-08-19 14:50:26.000000000","message":"This fix was released in the current version keystone uses.","commit_id":"378afd201215a238ce725e9146a8639f4ed35bc4"},{"author":{"_account_id":11861,"name":"Travis McPeak","email":"tmcpeak@us.ibm.com","username":"travis-mcpeak"},"change_message_id":"c7e612b6fa41133485284c135fc84aec9eab4b9e","unresolved":false,"context_lines":[{"line_number":82,"context_line":"            message: \"Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.\""},{"line_number":83,"context_line":"        - paramiko_injection:"},{"line_number":84,"context_line":"            qualnames: [paramiko.exec_command, paramiko.invoke_shell]"},{"line_number":85,"context_line":"            message: \"Paramiko exec_command() and invoke_shell() usage may expose command injection vulnerabilities and should be reviewed.\""},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"shell_injection:"},{"line_number":88,"context_line":"    # Start a process using the subprocess module, or one of its wrappers."}],"source_content_type":"text/x-yaml","patch_set":7,"id":"fa1b9901_62ded112","line":85,"updated":"2015-08-19 14:22:18.000000000","message":"if you\u0027re alphabetizing, do you want to do it here too?","commit_id":"378afd201215a238ce725e9146a8639f4ed35bc4"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"b4d55c75fdd259de4904d7cd8786c70c34408f58","unresolved":false,"context_lines":[{"line_number":56,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":57,"context_line":"            # - hardcoded_password"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"            # Not used because it\u0027s prone to false positives:"},{"line_number":60,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"            # TODO:"}],"source_content_type":"text/x-yaml","patch_set":10,"id":"ba15a1d1_3c5fbd42","line":59,"updated":"2015-09-22 13:02:13.000000000","message":"is there a bandit bug open for the false positives?","commit_id":"71012073e04a91d481439d86e8d70fb42a0dc9b5"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"aebd100bc71e33b259dbbf80a1533fa8471e09b0","unresolved":false,"context_lines":[{"line_number":56,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":57,"context_line":"            # - hardcoded_password"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"            # Not used because it\u0027s prone to false positives:"},{"line_number":60,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"            # TODO:"}],"source_content_type":"text/x-yaml","patch_set":10,"id":"ba15a1d1_ff6cd79d","line":59,"in_reply_to":"ba15a1d1_3c5fbd42","updated":"2015-09-22 13:10:11.000000000","message":"Not that I know of. I put this comment here because I got a comment in patch set 1 that said this from bandit authors.","commit_id":"71012073e04a91d481439d86e8d70fb42a0dc9b5"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"6a42fd2b1fa5433c18ab73a3bda78097dd0ce7ab","unresolved":false,"context_lines":[{"line_number":56,"context_line":"            # see https://bugs.launchpad.net/bandit/+bug/1451575 :"},{"line_number":57,"context_line":"            # - hardcoded_password"},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"            # Not used because it\u0027s prone to false positives:"},{"line_number":60,"context_line":"            # - hardcoded_sql_expressions"},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"            # TODO:"}],"source_content_type":"text/x-yaml","patch_set":10,"id":"ba15a1d1_df07937f","line":59,"in_reply_to":"ba15a1d1_ff6cd79d","updated":"2015-09-22 13:14:19.000000000","message":"Works for me, thanks!","commit_id":"71012073e04a91d481439d86e8d70fb42a0dc9b5"}]}