diff --git a/noxfile.py b/noxfile.py index 96748e216..e1b76a151 100644 --- a/noxfile.py +++ b/noxfile.py @@ -602,7 +602,7 @@ def security(session: nox.Session): """Run security checks matching Forgejo CI: bandit scan + vulture dead code.""" session.install("-e", ".[dev]") - # Step 1: Bandit – medium-severity report (non-blocking, mirrors CI JSON export) + # Step 1: Bandit - medium-severity report (non-blocking, mirrors CI JSON export) session.run( "bandit", "-c", @@ -618,7 +618,7 @@ def security(session: nox.Session): success_codes=[0, 1], ) - # Step 2: Bandit – high-severity gate (blocks on findings) + # Step 2: Bandit - high-severity gate (blocks on findings) session.run( "bandit", "-c", diff --git a/vulture_whitelist.py b/vulture_whitelist.py index 6f88658a7..4c7362fa8 100644 --- a/vulture_whitelist.py +++ b/vulture_whitelist.py @@ -9,3 +9,6 @@ exc_tb # noqa: B018, F821 # Legacy migrator method parameter needed for mapping interface consistency build_data # noqa: B018, F821 + +# SubplanFailureHandler.should_stop_others parameter required by public API +failed_status # noqa: B018, F821