)]}'
{"bandit.yaml":[{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"99cc65017a3034666a4b01b4f3c1e117e3230e2e","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"# globs of files which should be analyzed"},{"line_number":22,"context_line":"include:"},{"line_number":23,"context_line":"    - \u0027*.py\u0027"},{"line_number":24,"context_line":"    - \u0027*.pyw\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"# a list of strings, which if found in the path will cause files to be excluded"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3acd31a7_28241aad","line":23,"updated":"2015-05-04 18:16:44.000000000","message":"I\u0027m surprised this isn\u0027t the default","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"28e43c7e9f561e7b79339350889e00838339bed8","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"# globs of files which should be analyzed"},{"line_number":22,"context_line":"include:"},{"line_number":23,"context_line":"    - \u0027*.py\u0027"},{"line_number":24,"context_line":"    - \u0027*.pyw\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"# a list of strings, which if found in the path will cause files to be excluded"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3acd31a7_6d01fd04","line":23,"in_reply_to":"3acd31a7_28241aad","updated":"2015-05-04 21:25:24.000000000","message":"You\u0027re correct, the default is *.py and since there are no *.pyw files, I could remove this entry.  Sound good?\n\nhttps://github.com/stackforge/bandit/blob/master/bandit/core/manager.py#L132","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"c067a5d7aba3aea35dcbe3e4cb808e1d86710b45","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"# globs of files which should be analyzed"},{"line_number":22,"context_line":"include:"},{"line_number":23,"context_line":"    - \u0027*.py\u0027"},{"line_number":24,"context_line":"    - \u0027*.pyw\u0027"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"# a list of strings, which if found in the path will cause files to be excluded"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"7a016987_28ce352d","line":23,"in_reply_to":"3acd31a7_6d01fd04","updated":"2015-05-29 17:19:45.000000000","message":"sounds good","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"99cc65017a3034666a4b01b4f3c1e117e3230e2e","unresolved":false,"context_lines":[{"line_number":104,"context_line":"            message: \"Consider possible security implications associated with {module} module.\""},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"hardcoded_password:"},{"line_number":107,"context_line":"    word_list: \"wordlist/default-passwords\""},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"ssl_with_bad_version:"},{"line_number":110,"context_line":"    bad_protocol_versions:"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3acd31a7_08439e43","line":107,"updated":"2015-05-04 18:16:44.000000000","message":"where is this file?","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"28e43c7e9f561e7b79339350889e00838339bed8","unresolved":false,"context_lines":[{"line_number":104,"context_line":"            message: \"Consider possible security implications associated with {module} module.\""},{"line_number":105,"context_line":""},{"line_number":106,"context_line":"hardcoded_password:"},{"line_number":107,"context_line":"    word_list: \"wordlist/default-passwords\""},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"ssl_with_bad_version:"},{"line_number":110,"context_line":"    bad_protocol_versions:"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"3acd31a7_6aa323b3","line":107,"in_reply_to":"3acd31a7_08439e43","updated":"2015-05-04 21:25:24.000000000","message":"Good catch.  I\u0027ve opened a bug on bandit.\n\nhttps://bugs.launchpad.net/bandit/+bug/1451575\n\nThe file is in the source, but not installed.  Plus it needs to load the file properly when run from other projects.\n\nhttps://github.com/stackforge/bandit/blob/master/wordlist/default-passwords","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"}],"tox.ini":[{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"99cc65017a3034666a4b01b4f3c1e117e3230e2e","unresolved":false,"context_lines":[{"line_number":64,"context_line":"  bash -c \u0027! find doc/ -type f -name *.json | xargs -t -n1 python -m json.tool 2\u003e\u00261 \u003e /dev/null | grep -B1 -v ^python\u0027"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"[testenv:bandit]"},{"line_number":67,"context_line":"deps \u003d -r{toxinidir}/test-requirements-bandit.txt"},{"line_number":68,"context_line":"commands \u003d bandit -c bandit.yaml -r nova -n 5"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"[flake8]"}],"source_content_type":"text/x-properties","patch_set":2,"id":"3acd31a7_682a1280","line":67,"updated":"2015-05-04 18:16:44.000000000","message":"Why have a file for this, can\u0027t we just list bandit here?","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"c067a5d7aba3aea35dcbe3e4cb808e1d86710b45","unresolved":false,"context_lines":[{"line_number":64,"context_line":"  bash -c \u0027! find doc/ -type f -name *.json | xargs -t -n1 python -m json.tool 2\u003e\u00261 \u003e /dev/null | grep -B1 -v ^python\u0027"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"[testenv:bandit]"},{"line_number":67,"context_line":"deps \u003d -r{toxinidir}/test-requirements-bandit.txt"},{"line_number":68,"context_line":"commands \u003d bandit -c bandit.yaml -r nova -n 5"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"[flake8]"}],"source_content_type":"text/x-properties","patch_set":2,"id":"7a016987_68ef8d87","line":67,"in_reply_to":"3acd31a7_4d89a174","updated":"2015-05-29 17:19:45.000000000","message":"thanks for the clarification","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"28e43c7e9f561e7b79339350889e00838339bed8","unresolved":false,"context_lines":[{"line_number":64,"context_line":"  bash -c \u0027! find doc/ -type f -name *.json | xargs -t -n1 python -m json.tool 2\u003e\u00261 \u003e /dev/null | grep -B1 -v ^python\u0027"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"[testenv:bandit]"},{"line_number":67,"context_line":"deps \u003d -r{toxinidir}/test-requirements-bandit.txt"},{"line_number":68,"context_line":"commands \u003d bandit -c bandit.yaml -r nova -n 5"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"[flake8]"}],"source_content_type":"text/x-properties","patch_set":2,"id":"3acd31a7_4d89a174","line":67,"in_reply_to":"3acd31a7_682a1280","updated":"2015-05-04 21:25:24.000000000","message":"The deps in tox.ini wouldn\u0027t get updated automatically by the\nopenstack proposal bot. By moving the bandit requirements into\ntest-requirements-bandit.txt it will get updated automatically\nwhen global-requirements changes.","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":1849,"name":"Joe Gordon","email":"joe.gordon0@gmail.com","username":"jogo"},"change_message_id":"c067a5d7aba3aea35dcbe3e4cb808e1d86710b45","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"[testenv:bandit]"},{"line_number":67,"context_line":"deps \u003d -r{toxinidir}/test-requirements-bandit.txt"},{"line_number":68,"context_line":"commands \u003d bandit -c bandit.yaml -r nova -n 5"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"[flake8]"},{"line_number":71,"context_line":"# E125 is deliberately excluded. See https://github.com/jcrocholl/pep8/issues/126"}],"source_content_type":"text/x-properties","patch_set":2,"id":"7a016987_28e515a3","line":68,"updated":"2015-05-29 17:19:45.000000000","message":"why do we have to override the default number of lines of context?","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"3958a7eef0f29f99b9b65d1c3de8a23ee56fc52a","unresolved":false,"context_lines":[{"line_number":65,"context_line":""},{"line_number":66,"context_line":"[testenv:bandit]"},{"line_number":67,"context_line":"deps \u003d -r{toxinidir}/test-requirements-bandit.txt"},{"line_number":68,"context_line":"commands \u003d bandit -c bandit.yaml -r nova -n 5"},{"line_number":69,"context_line":""},{"line_number":70,"context_line":"[flake8]"},{"line_number":71,"context_line":"# E125 is deliberately excluded. See https://github.com/jcrocholl/pep8/issues/126"}],"source_content_type":"text/x-properties","patch_set":2,"id":"5afe65bd_b4346e4a","line":68,"in_reply_to":"7a016987_28e515a3","updated":"2015-06-01 17:36:16.000000000","message":"No particular reason.  I thought it would be clearer, but doesn\u0027t seem to matter that much. I can remove.","commit_id":"18995fa163c344272489db43cf725a02cd70a74f"}]}