Mathieu Kniewallner

Add a configuration option to prohibit `# nosec` without specific error codes

1

**Is your feature request related to a problem? Please describe.** Now that bandit supports a way to only ignore specific error codes when using `# nosec` (https://github.com/PyCQA/bandit/pull/597), it could be...

Partially handle extra version for versions constraint

2

Resolves: python-poetry/poetry#3186 - [x] Added **tests** for changed code. - [ ] Updated **documentation** for changed code. Poetry seems to assume that all packages follow SemVer specification for versioning. However,...

Add `python-check-blanket-nosec` hook for bandit

1

[Version 1.7.3](https://github.com/PyCQA/bandit/releases/tag/1.7.3) of Python SAST tool [bandit](https://github.com/PyCQA/bandit) added support for disabling individual tests in https://github.com/PyCQA/bandit/pull/597. It is now possible to disable specific codes like so: ```python # nosec: B101, B102...

Before submitting your pull-request, make sure the following is done. * [x] Fork [the repository](https://github.com/tartiflette/tartiflette) and create your branch from `master` so that it can be merged easily. * [...

Make `--version` a non-global option

4

Resolves https://github.com/python-poetry/cleo/issues/142.

Make `--version` a non-global option?

1

As reported in https://github.com/python-poetry/poetry/issues/5128, `--version` is currently a global option in cleo. This makes the behavior of some commands pretty weird, since passing `--version` to any command will exit the...

Allow passing any environment variable to `docker run`

2

Say I have a Renovate config that requires an environment variable to be set in order to access a private repository: ```javascript module.exports = { hostRules: [ { matchHost: "https://pypi.example.com/simple",...

fix(factory): unwrap config to not end up with `tomlkit` instances

1

Resolves python-poetry/poetry/issues/6201. - [ ] Added **tests** for changed code. - [ ] Updated **documentation** for changed code. WIP for now, since we need to measure the impacts of this...

# Pull Request Check List Cache is never reused on macOS because we use `timeout` to validate cache healthiness, but `timeout` is not available on macOS. So as the command...

chore(ci): check lock file consistency

3

Check lock file consistency on the CI, to ensure that `poetry.lock` is correctly updated on PRs updating dependencies in `pyproject.toml`. This has been tested on my fork, with 2 cases:...