)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":1131,"name":"Brian Haley","email":"haleyb.dev@gmail.com","username":"brian-haley"},"change_message_id":"e83b096b2a29690637c95c08e9fb36f781ec2181","unresolved":true,"context_lines":[{"line_number":9,"context_line":"Remove B303 (md5, sha1 for python\u003c3.9) and"},{"line_number":10,"context_line":"remove B311 (Standard pseudo-random generators are"},{"line_number":11,"context_line":"not suitable for security/cryptographic purpose) from"},{"line_number":12,"context_line":"the skip list of bandit execution."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"Change-Id: I6e9e61e7f94dc9ca339942529af8997adef45e38"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"dfb43346_d696d3c5","line":12,"updated":"2024-03-28 14:55:17.000000000","message":"None of these places seem like a security/crypto purpose, bandit isn\u0027t able to see that though? Is the goal to just replace any usage of the random library?","commit_id":"3c557b29f843d6f364e608d2fe71671e0d69b1ea"}],"/PATCHSET_LEVEL":[{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"9c86414a79260fed5e22e71503dafc761ba854a2","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":2,"id":"3183e12f_b165aa45","updated":"2024-03-29 07:53:12.000000000","message":"recheck known issue in FT","commit_id":"3c557b29f843d6f364e608d2fe71671e0d69b1ea"}],"tox.ini":[{"author":{"_account_id":8313,"name":"Lajos Katona","display_name":"lajoskatona","email":"katonalala@gmail.com","username":"elajkat","status":"Ericsson Software Technology"},"change_message_id":"b8cb5cb9f575bac488a1bc036f4bce13a2775d32","unresolved":true,"context_lines":[{"line_number":224,"context_line":"# B104: Possible binding to all interfaces"},{"line_number":225,"context_line":"# B303: prohibit list calls: md5, sha1 for python\u003c3.9"},{"line_number":226,"context_line":"# B311: Standard pseudo-random generators are not suitable for security/cryptographic purpose"},{"line_number":227,"context_line":"# B324: prohibit list calls: md5, sha1 for python\u003e\u003d3.9"},{"line_number":228,"context_line":"# B604: any_other_function_with_shell_equals_true"},{"line_number":229,"context_line":"commands \u003d bandit -r neutron -x tests -n5 -s B104,B303,B311,B324,B604"},{"line_number":230,"context_line":""}],"source_content_type":"text/x-properties","patch_set":2,"id":"c14dfcf7_b97866fc","side":"PARENT","line":227,"range":{"start_line":227,"start_character":8,"end_line":227,"end_character":54},"updated":"2024-03-28 13:03:52.000000000","message":"Used here: https://opendev.org/openstack/neutron/src/branch/master/neutron/plugins/ml2/drivers/openvswitch/agent/ovs_neutron_agent.py#L2467 perhaps an easy target","commit_id":"076d9ad47f42c18cdb7fc8d9a0a0f3c43a66f945"},{"author":{"_account_id":16688,"name":"Rodolfo Alonso","email":"ralonsoh@redhat.com","username":"rodolfo-alonso-hernandez"},"change_message_id":"9c86414a79260fed5e22e71503dafc761ba854a2","unresolved":true,"context_lines":[{"line_number":224,"context_line":"# B104: Possible binding to all interfaces"},{"line_number":225,"context_line":"# B303: prohibit list calls: md5, sha1 for python\u003c3.9"},{"line_number":226,"context_line":"# B311: Standard pseudo-random generators are not suitable for security/cryptographic purpose"},{"line_number":227,"context_line":"# B324: prohibit list calls: md5, sha1 for python\u003e\u003d3.9"},{"line_number":228,"context_line":"# B604: any_other_function_with_shell_equals_true"},{"line_number":229,"context_line":"commands \u003d bandit -r neutron -x tests -n5 -s B104,B303,B311,B324,B604"},{"line_number":230,"context_line":""}],"source_content_type":"text/x-properties","patch_set":2,"id":"65f83927_99b0dc94","side":"PARENT","line":227,"range":{"start_line":227,"start_character":8,"end_line":227,"end_character":54},"in_reply_to":"c14dfcf7_b97866fc","updated":"2024-03-29 07:53:12.000000000","message":"Maybe you can open a LP bug for B324 and another one for B604","commit_id":"076d9ad47f42c18cdb7fc8d9a0a0f3c43a66f945"},{"author":{"_account_id":8313,"name":"Lajos Katona","display_name":"lajoskatona","email":"katonalala@gmail.com","username":"elajkat","status":"Ericsson Software Technology"},"change_message_id":"b8cb5cb9f575bac488a1bc036f4bce13a2775d32","unresolved":true,"context_lines":[{"line_number":225,"context_line":"# B303: prohibit list calls: md5, sha1 for python\u003c3.9"},{"line_number":226,"context_line":"# B311: Standard pseudo-random generators are not suitable for security/cryptographic purpose"},{"line_number":227,"context_line":"# B324: prohibit list calls: md5, sha1 for python\u003e\u003d3.9"},{"line_number":228,"context_line":"# B604: any_other_function_with_shell_equals_true"},{"line_number":229,"context_line":"commands \u003d bandit -r neutron -x tests -n5 -s B104,B303,B311,B324,B604"},{"line_number":230,"context_line":""},{"line_number":231,"context_line":"[testenv:bashate]"}],"source_content_type":"text/x-properties","patch_set":2,"id":"7754dc6e_0e52d830","side":"PARENT","line":228,"range":{"start_line":228,"start_character":8,"end_line":228,"end_character":49},"updated":"2024-03-28 13:03:52.000000000","message":"used only here: https://opendev.org/openstack/neutron/src/branch/master/neutron/common/utils.py#L135\nnot sure if it can be replaced.","commit_id":"076d9ad47f42c18cdb7fc8d9a0a0f3c43a66f945"}]}