serve
serve copied to clipboard
CI: missing security check for security issues in the codebase
🐛 Describe the bug
Currently, the project does not have a security linter integrated into its CI pipeline. This poses potential risks as security vulnerabilities in Python code can go undetected. I found many high security issues using Bandit
Error logs
Installation instructions
No
Model Packaging
No
config.properties
No response
Versions
No
Repro instructions
Reproduce:
> pip install bandit
> bandit -r . --severity-level high -s B501 # Skip the B501 rule related to SSL certificate validation checks
Possible Solution
Add Security Check Using Bandit in CI