Skip to content

Is release.py still used? #613

Description

@loqs

Replacing direct use of bandit with flake8-bandit causes housekeep.py to be scanned for security issues:

flake8 aiosmtpd housekeep.py release.py setup.py --select S
pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
Unable to find qualified name for module: housekeep.py
Unable to find qualified name for module: release.py
Unable to find qualified name for module: setup.py
release.py:101:1: S603 subprocess call - check for execution of untrusted input.
release.py:103:1: S603 subprocess call - check for execution of untrusted input.
release.py:109:1: S603 subprocess call - check for execution of untrusted input.
release.py:126:1: S603 subprocess call - check for execution of untrusted input.
release.py:141:1: S603 subprocess call - check for execution of untrusted input.
release.py:156:1: S607 Starting a process with a partial executable path
release.py:156:1: S603 subprocess call - check for execution of untrusted input.
release.py:158:1: S607 Starting a process with a partial executable path
release.py:158:1: S603 subprocess call - check for execution of untrusted input.

If it is not used the simplest solution would be to delete it. Otherwise the detected issues need to be reviewed and addressed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions