You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bandit checks such as "Standard pseudo-random generators are not suitable for security/cryptographic purposes." should be ignored in the configuration because we are generating a lot of random numbers at different places for other than cryptographic purposes. Ignoring per line would not be practical. If we do cryptography on this level, that's a different problem (which may or may not be caught by this check). Overall, we can assume that all random numbers are used for other than cryptographic purposes.
Screenshot
Right now, the issue needs to be dismissed for every PR and even an existing dismissal does not apply when running Bandit locally.
The text was updated successfully, but these errors were encountered:
Bandit checks such as "Standard pseudo-random generators are not suitable for security/cryptographic purposes." should be ignored in the configuration because we are generating a lot of random numbers at different places for other than cryptographic purposes. Ignoring per line would not be practical. If we do cryptography on this level, that's a different problem (which may or may not be caught by this check). Overall, we can assume that all random numbers are used for other than cryptographic purposes.
Screenshot
Right now, the issue needs to be dismissed for every PR and even an existing dismissal does not apply when running Bandit locally.
The text was updated successfully, but these errors were encountered: