add security auditing of python code using Bandit during CICD (#491)

2025-06-16 20:08:09 +00:00 · 2021-02-01 16:51:03 -05:00
parent 0f70ffa3e2
commit 5e2e9448df
12 changed files with 69 additions and 24 deletions
--- a/src/api-service/app/onefuzzlib/azure/storage.py
+++ b/src/api-service/app/onefuzzlib/azure/storage.py
@ -86,7 +86,9 @@ def choose_account(storage_type: StorageType) -> str:
    # Use a random secondary storage account if any are available.  This
    # reduces IOP contention for the Storage Queues, which are only available
    # on primary accounts
-    return random.choice(accounts[1:])
+    #
+    # security note: this is not used as a security feature
+    return random.choice(accounts[1:])  # nosec


@cached