Skip to content

Conversation

ChihweiLHBird
Copy link
Member

With the assumption that all issues reported on the current HEAD of the codebase are all false positives, generate the baseline file by:

bandit --recursive sanic -b ./bandit.baseline

And apply the baseline during security checks.

@ChihweiLHBird ChihweiLHBird requested a review from a team as a code owner September 14, 2025 20:53
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR creates a bandit baseline file to filter out false positive security warnings by changing the security check configuration from skipping specific test types to using a baseline file approach.

  • Updated the security check command in tox.ini to use baseline filtering
  • Added a comprehensive bandit.baseline file containing 10 current security findings

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
tox.ini Modified bandit command to use baseline filtering instead of skipping specific test types
bandit.baseline Added comprehensive baseline file with 10 security findings marked as false positives

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant