Skip to content

Hardening suggestions for codemodder-python / harden-pickle-load#333

Merged
drdavella merged 2 commits intomainfrom
pixeebot/harden-pickle-load
Mar 6, 2024
Merged

Hardening suggestions for codemodder-python / harden-pickle-load#333
drdavella merged 2 commits intomainfrom
pixeebot/harden-pickle-load

Conversation

@pixeebot
Copy link
Copy Markdown
Contributor

@pixeebot pixeebot bot commented Mar 5, 2024

I've reviewed the recently opened PR (332 - Add codemod harden-pickle-load) and have identified some area(s) that could benefit from additional hardening measures.

These changes should help prevent potential security vulnerabilities and improve overall code quality.

Thank you for your consideration!

docs | feedback
Powered by: pixeebot

@pixeebot pixeebot bot requested a review from drdavella as a code owner March 5, 2024 20:30
@pixeebot pixeebot bot requested a review from drdavella March 5, 2024 20:30
requirements_path = "tests/samples/requirements.txt"
original_requirements = "# file used to test dependency management\nrequests==2.31.0\nblack==23.7.*\nmypy~=1.4\npylint>1\n"
expected_new_reqs = (
f"# file used to test dependency management\n"
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove unnecessary f-string

@drdavella drdavella force-pushed the harden-pickle-load branch from 0a4373b to fa19a15 Compare March 5, 2024 20:36
Copy link
Copy Markdown
Member

@drdavella drdavella left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Need to rebase before merge.

@drdavella drdavella force-pushed the harden-pickle-load branch 2 times, most recently from 88ce86f to 3d88d85 Compare March 6, 2024 14:03
Base automatically changed from harden-pickle-load to main March 6, 2024 15:08
@drdavella drdavella force-pushed the pixeebot/harden-pickle-load branch from 565e56c to e1f3349 Compare March 6, 2024 18:54
@drdavella drdavella enabled auto-merge March 6, 2024 18:54
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Mar 6, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@drdavella drdavella added this pull request to the merge queue Mar 6, 2024
Merged via the queue into main with commit 49ee7d0 Mar 6, 2024
@drdavella drdavella deleted the pixeebot/harden-pickle-load branch March 6, 2024 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant