build(env): Update security Vulture check exceptions

This commit is contained in:
CoreRasurae
2026-02-12 16:57:14 +00:00
committed by Luis Mendes
parent aa299966ad
commit e7ad541b71
2 changed files with 5 additions and 2 deletions
+2 -2
View File
@@ -602,7 +602,7 @@ def security(session: nox.Session):
"""Run security checks matching Forgejo CI: bandit scan + vulture dead code."""
session.install("-e", ".[dev]")
# Step 1: Bandit medium-severity report (non-blocking, mirrors CI JSON export)
# Step 1: Bandit - medium-severity report (non-blocking, mirrors CI JSON export)
session.run(
"bandit",
"-c",
@@ -618,7 +618,7 @@ def security(session: nox.Session):
success_codes=[0, 1],
)
# Step 2: Bandit high-severity gate (blocks on findings)
# Step 2: Bandit - high-severity gate (blocks on findings)
session.run(
"bandit",
"-c",
+3
View File
@@ -9,3 +9,6 @@ exc_tb # noqa: B018, F821
# Legacy migrator method parameter needed for mapping interface consistency
build_data # noqa: B018, F821
# SubplanFailureHandler.should_stop_others parameter required by public API
failed_status # noqa: B018, F821