Skip to content

Add codemod harden-pickle-load#332

Merged
drdavella merged 2 commits intomainfrom
harden-pickle-load
Mar 6, 2024
Merged

Add codemod harden-pickle-load#332
drdavella merged 2 commits intomainfrom
harden-pickle-load

Conversation

@drdavella
Copy link
Copy Markdown
Member

@drdavella drdavella commented Mar 5, 2024

Overview

Add code to harden calls to pickle.load

Description

  • @matt- brought the fickling library to my attention the other day
  • This gives us an opportunity to add hardening to pickle.load calls
  • Ideally developers should avoid pickle altogether but this can make code safer in the meantime
  • This should help us remediate findings from other tools as well

@drdavella drdavella enabled auto-merge March 6, 2024 14:02
@drdavella drdavella force-pushed the harden-pickle-load branch from 88ce86f to 3d88d85 Compare March 6, 2024 14:03
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Mar 6, 2024

Quality Gate Passed Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@drdavella drdavella added this pull request to the merge queue Mar 6, 2024
Merged via the queue into main with commit 018ce52 Mar 6, 2024
@drdavella drdavella deleted the harden-pickle-load branch March 6, 2024 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants