)]}'
{"bandit.yaml":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"3c9508a08b6cb2273d1a87bd6086b3f667be07da","unresolved":false,"context_lines":[{"line_number":49,"context_line":""},{"line_number":50,"context_line":"            - hardcoded_bind_all_interfaces"},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"            # Disable these since they\u0027re new. TODO: see if these work."},{"line_number":53,"context_line":"            # - hardcoded_password_string"},{"line_number":54,"context_line":"            # - hardcoded_password_funcarg"},{"line_number":55,"context_line":"            # - hardcoded_password_default"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"da6ed579_f5f93681","line":52,"range":{"start_line":52,"start_character":47,"end_line":52,"end_character":51},"updated":"2016-01-13 18:07:42.000000000","message":"(nit) TODO(name)","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"1a359980da2c8c084bc83c95dfb53e59b17e88ee","unresolved":false,"context_lines":[{"line_number":49,"context_line":""},{"line_number":50,"context_line":"            - hardcoded_bind_all_interfaces"},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"            # Disable these since they\u0027re new. TODO: see if these work."},{"line_number":53,"context_line":"            # - hardcoded_password_string"},{"line_number":54,"context_line":"            # - hardcoded_password_funcarg"},{"line_number":55,"context_line":"            # - hardcoded_password_default"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a68dd71_f5573a24","line":52,"range":{"start_line":52,"start_character":47,"end_line":52,"end_character":51},"in_reply_to":"da6ed579_f5f93681","updated":"2016-01-26 22:35:35.000000000","message":"Done","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c769742dc00a481f456de13d4db69110c98a1b1c","unresolved":false,"context_lines":[{"line_number":49,"context_line":""},{"line_number":50,"context_line":"            - hardcoded_bind_all_interfaces"},{"line_number":51,"context_line":""},{"line_number":52,"context_line":"            # Disable these since they\u0027re new. TODO: see if these work."},{"line_number":53,"context_line":"            # - hardcoded_password_string"},{"line_number":54,"context_line":"            # - hardcoded_password_funcarg"},{"line_number":55,"context_line":"            # - hardcoded_password_default"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"da6ed579_24ff9d68","line":52,"range":{"start_line":52,"start_character":47,"end_line":52,"end_character":51},"in_reply_to":"da6ed579_f5f93681","updated":"2016-01-13 18:25:33.000000000","message":"i\u0027m ok with this since it\u0027s removed in the follow up","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"3c9508a08b6cb2273d1a87bd6086b3f667be07da","unresolved":false,"context_lines":[{"line_number":83,"context_line":"            # Keystone has no use for mako."},{"line_number":84,"context_line":"            # - use_of_mako_templates"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"            # Disable this one since it\u0027s new. TODO: see if these work."},{"line_number":87,"context_line":"            # - weak_cryptographic_key"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"da6ed579_3584aed2","line":86,"range":{"start_line":86,"start_character":47,"end_line":86,"end_character":51},"updated":"2016-01-13 18:07:42.000000000","message":"ditto","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"1a359980da2c8c084bc83c95dfb53e59b17e88ee","unresolved":false,"context_lines":[{"line_number":83,"context_line":"            # Keystone has no use for mako."},{"line_number":84,"context_line":"            # - use_of_mako_templates"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"            # Disable this one since it\u0027s new. TODO: see if these work."},{"line_number":87,"context_line":"            # - weak_cryptographic_key"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a68dd71_d53556f7","line":86,"range":{"start_line":86,"start_character":47,"end_line":86,"end_character":51},"in_reply_to":"da6ed579_3584aed2","updated":"2016-01-26 22:35:35.000000000","message":"Done","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c769742dc00a481f456de13d4db69110c98a1b1c","unresolved":false,"context_lines":[{"line_number":83,"context_line":"            # Keystone has no use for mako."},{"line_number":84,"context_line":"            # - use_of_mako_templates"},{"line_number":85,"context_line":""},{"line_number":86,"context_line":"            # Disable this one since it\u0027s new. TODO: see if these work."},{"line_number":87,"context_line":"            # - weak_cryptographic_key"},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"blacklist_calls:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"da6ed579_4402d170","line":86,"range":{"start_line":86,"start_character":47,"end_line":86,"end_character":51},"in_reply_to":"da6ed579_3584aed2","updated":"2016-01-13 18:25:33.000000000","message":"same","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c769742dc00a481f456de13d4db69110c98a1b1c","unresolved":false,"context_lines":[{"line_number":99,"context_line":"            message: \u003e"},{"line_number":100,"context_line":"                Pickle library appears to be in use, possible security issue."},{"line_number":101,"context_line":"        - marshal:"},{"line_number":102,"context_line":"            qualnames: [marshal.load, marshal.loads]"},{"line_number":103,"context_line":"            message: \u003e"},{"line_number":104,"context_line":"                Deserialization with the marshal module is possibly dangerous."},{"line_number":105,"context_line":"        - md5:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"da6ed579_a4f38d9d","line":102,"range":{"start_line":102,"start_character":23,"end_line":102,"end_character":52},"updated":"2016-01-13 18:25:33.000000000","message":"should these be in a list, like pickle and crypto?","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"1a359980da2c8c084bc83c95dfb53e59b17e88ee","unresolved":false,"context_lines":[{"line_number":99,"context_line":"            message: \u003e"},{"line_number":100,"context_line":"                Pickle library appears to be in use, possible security issue."},{"line_number":101,"context_line":"        - marshal:"},{"line_number":102,"context_line":"            qualnames: [marshal.load, marshal.loads]"},{"line_number":103,"context_line":"            message: \u003e"},{"line_number":104,"context_line":"                Deserialization with the marshal module is possibly dangerous."},{"line_number":105,"context_line":"        - md5:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a68dd71_5522c6ba","line":102,"range":{"start_line":102,"start_character":23,"end_line":102,"end_character":52},"in_reply_to":"9a68dd71_a94e5dbf","updated":"2016-01-26 22:35:35.000000000","message":"Done","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a4bcd8d24e7a258b7d0d01c7d51f02266a9a1ed9","unresolved":false,"context_lines":[{"line_number":99,"context_line":"            message: \u003e"},{"line_number":100,"context_line":"                Pickle library appears to be in use, possible security issue."},{"line_number":101,"context_line":"        - marshal:"},{"line_number":102,"context_line":"            qualnames: [marshal.load, marshal.loads]"},{"line_number":103,"context_line":"            message: \u003e"},{"line_number":104,"context_line":"                Deserialization with the marshal module is possibly dangerous."},{"line_number":105,"context_line":"        - md5:"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a68dd71_a94e5dbf","line":102,"range":{"start_line":102,"start_character":23,"end_line":102,"end_character":52},"in_reply_to":"da6ed579_a4f38d9d","updated":"2016-01-20 21:23:59.000000000","message":"++ I\u0027d like to stick to a convention if we can.","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"3c9508a08b6cb2273d1a87bd6086b3f667be07da","unresolved":false,"context_lines":[{"line_number":316,"context_line":"            imports: [telnetlib]"},{"line_number":317,"context_line":"            level: HIGH"},{"line_number":318,"context_line":"            message: \u003e"},{"line_number":319,"context_line":"                A telnet-related module is being imported.  Telnet is"},{"line_number":320,"context_line":"                considered insecure. Use SSH or some other encrypted protocol."},{"line_number":321,"context_line":"        - info_libs:"},{"line_number":322,"context_line":"            imports: [pickle, cPickle, subprocess, Crypto]"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"da6ed579_35b7ce87","line":319,"range":{"start_line":319,"start_character":58,"end_line":319,"end_character":60},"updated":"2016-01-13 18:07:42.000000000","message":"(nit) double-spaced","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"1a359980da2c8c084bc83c95dfb53e59b17e88ee","unresolved":false,"context_lines":[{"line_number":316,"context_line":"            imports: [telnetlib]"},{"line_number":317,"context_line":"            level: HIGH"},{"line_number":318,"context_line":"            message: \u003e"},{"line_number":319,"context_line":"                A telnet-related module is being imported.  Telnet is"},{"line_number":320,"context_line":"                considered insecure. Use SSH or some other encrypted protocol."},{"line_number":321,"context_line":"        - info_libs:"},{"line_number":322,"context_line":"            imports: [pickle, cPickle, subprocess, Crypto]"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9a68dd71_75110a5d","line":319,"range":{"start_line":319,"start_character":58,"end_line":319,"end_character":60},"in_reply_to":"da6ed579_35b7ce87","updated":"2016-01-26 22:35:35.000000000","message":"Done","commit_id":"ec4d8d890674fa2feea06b87626ad0866c618825"}]}