Update pr-lines-test.py #26

chmccreery · 2022-04-28T23:37:53Z

No description provided.

pr-lines-test.py

dev-semgrep-app · 2022-04-28T23:53:21Z

Semgrep found 5 avoid-bind-to-all-interfaces findings:

pr-lines-test.py: L6-10, L6-13, L9-10, L9-13, L12-13

Running socket.bind to 0.0.0.0, ::, or empty string could unexpectedly expose the server publicly as it binds to all available interfaces. Consider instead getting correct address from an environment variable or configuration file.

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.audit.network.bind.avoid-bind-to-all-interfaces.}

pr-lines-test.py

semgrep-app-local-dev · 2022-05-02T18:56:49Z

Semgrep found 1 useless-eqeq finding:

cron-test.py: L5

This expression is always True: 7 == 7 or 7 != 7. If testing for floating point NaN, use math.isnan(7), or cmath.isnan(7) if the number is complex.

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.correctness.useless-eqeq.useless-eqeq.}

Semgrep found 1 use-defused-xml finding:

cron-test.py: L1

The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service.

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-02T18:58:10Z

Semgrep found 1 useless-eqeq finding:

cron-test.py: L5

This expression is always True: 7 == 7 or 7 != 7. If testing for floating point NaN, use math.isnan(7), or cmath.isnan(7) if the number is complex.

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.correctness.useless-eqeq.useless-eqeq.}

Semgrep found 1 use-defused-xml finding:

cron-test.py: L1

The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service.

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-02T19:50:14Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-02T19:59:02Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-02T21:49:45Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T17:56:53Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T17:58:14Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:02:35Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:04:55Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:06:13Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:10:35Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:40:26Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:51:00Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:53:02Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T18:56:07Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T19:07:38Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Suggested change

import xml

import defusedxml

_{⚪️ This finding does not block your pull request.}
_{🙈 From python.lang.security.use-defused-xml.use-defused-xml.}

semgrep-app-local-dev · 2022-05-03T19:09:47Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

Fixed in commit 3b1709949d372c16a6e8cf5c799b60da 🎉

semgrep-app-local-dev · 2022-05-03T19:15:51Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


fixed in latest scan

pr-lines-test.py

semgrep-app-local-dev · 2022-05-05T17:49:19Z

pr-lines-test.py

-import pdb;
-pdb.set_trace();
-print("hello world")
+7 == 7


~~This expression is always True: 7 == 7 or 7 != 7. If testing for floating point NaN, use math.isnan(7), or cmath.isnan(7) if the number is complex. (Line 3)~~

🧹 Fixed in commit c6a324e 🧹

…erver into chmccreery-patch-3

semgrep-app-local-dev · 2022-05-09T19:14:21Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

🧹 Fixed in commit b59c8a9 🧹

semgrep-app-local-dev · 2022-05-09T19:18:36Z

pr-lines-test.py

@@ -1,8 +1,5 @@
+import xml


The Python documentation recommends using defusedxml instead of xml because the native Python xml library is vulnerable to XML External Entity (XXE) attacks. These attacks can leak confidential data and "XML bombs" can cause denial of service. (Line 1)

🍰 Fixed in commit 43f040d 🍰

chmccreery · 2022-10-13T03:59:21Z

.github/workflows/semgrep.yml

+    - main
+    paths:
+    - .github/workflows/semgrep.yml
+  schedule:


Testing testing

Update pr-lines-test.py

48dd16b

dev-semgrep-app bot reviewed Apr 28, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

chmccreery added 4 commits April 28, 2022 16:40

Update pr-lines-test.py

17114a6

Update pr-lines-test.py

5e74ad6

Update pr-lines-test.py

5128fde

Update pr-lines-test.py

1b9170f

Update pr-lines-test.py

0e7b448

dev-semgrep-app bot reviewed Apr 28, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

autofix-test

b93064e

Repository owner deleted a comment from dev-semgrep-app bot May 2, 2022

Update PR number again?

d0fa302

semgrep-app-local-dev bot reviewed May 2, 2022

View reviewed changes

semgrep-app-local-dev bot reviewed May 3, 2022

View reviewed changes

pr-lines-test.py Outdated

@@ -1,8 +1,5 @@

import xml

Copy link

semgrep-app-local-dev bot May 3, 2022 •

edited

Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fixed in latest scan

dev-semgrep-app bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

dev-semgrep-app bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

chmccreery added 2 commits May 4, 2022 11:19

fix 7s

c2f2fe4

fix eights

687df05

semgrep-app-local-dev bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

dev-semgrep-app bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

fix sevens

b4df849

semgrep-app-local-dev bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

dev-semgrep-app bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

fix 8s

96672b6

semgrep-app-local-dev bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

dev-semgrep-app bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

semgrep-app-local-dev bot reviewed May 4, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

chmccreery added 2 commits May 4, 2022 12:34

fix all the issues

ccef22d

add xml vuln

1f75de8

semgrep-app-local-dev bot reviewed May 5, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

dev-semgrep-app bot reviewed May 5, 2022

View reviewed changes

pr-lines-test.py Outdated Show resolved Hide resolved

chmccreery added 2 commits May 5, 2022 10:38

remove xml vuln

4a34d9d

add sevens issue

8dd2a01

semgrep-app-local-dev bot reviewed May 5, 2022

View reviewed changes

chmccreery added 4 commits May 5, 2022 10:50

resolve

c6a324e

Merge branch 'main' into chmccreery-patch-3

cd8bbea

add xml

bb2f27f

Merge branch 'chmccreery-patch-3' of github.com:chmccreery/test-dev-s…

7b51ec7

…erver into chmccreery-patch-3

semgrep-app-local-dev bot reviewed May 9, 2022

View reviewed changes

chmccreery added 2 commits May 9, 2022 12:16

fix

b59c8a9

reintroduce

38964f2

semgrep-app-local-dev bot reviewed May 9, 2022

View reviewed changes

fix

43f040d

chmccreery commented Oct 13, 2022

View reviewed changes

.github/workflows/semgrep.yml

- main

paths:

- .github/workflows/semgrep.yml

schedule:

Copy link

Owner Author

chmccreery Oct 13, 2022 •

edited

Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Testing testing

Update pr-lines-test.py #26

Are you sure you want to change the base?

Update pr-lines-test.py #26

Uh oh!

Conversation

chmccreery commented Apr 28, 2022

Uh oh!

Uh oh!

dev-semgrep-app bot commented Apr 28, 2022

Uh oh!

Uh oh!

semgrep-app-local-dev bot commented May 2, 2022

Uh oh!

semgrep-app-local-dev bot commented May 2, 2022

Uh oh!

semgrep-app-local-dev bot May 2, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 2, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 2, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022 • edited by chmccreery Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

semgrep-app-local-dev bot May 5, 2022 • edited by chmccreery Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

semgrep-app-local-dev bot May 3, 2022 •

edited by chmccreery

Loading

semgrep-app-local-dev bot May 3, 2022 •

edited

Loading

semgrep-app-local-dev bot May 5, 2022 •

edited by chmccreery

Loading

semgrep-app-local-dev bot May 9, 2022 •

edited

Loading

semgrep-app-local-dev bot May 9, 2022 •

edited

Loading

chmccreery Oct 13, 2022 •

edited

Loading