Cereal2nd
commented
1 year ago - [ ] file:///github/workspace/velbusaio/handler.py#L108 STR100: Calling format with insecure string. Found in 'format(x, "02x")'.
- [ ] file:///github/workspace/velbusaio/handler.py#L115 STR100: Calling format with insecure string. Found in 'format(x, "02x")'.
- [ ] file:///github/workspace/velbusaio/helpers.py#L35 STR100: Calling format with insecure string. Found in 'format(inp, "02x")'.
- [ ] file:///github/workspace/velbusaio/messages/dali_device_settings.py#L39 TRY100: Ignoring exceptions without either logging or handling is not considered good security practice. Found in 'except Exception: # Unknown subtype or error while decoding; leave as bytes ...'.
- [x] file:///github/workspace/velbusaio/util.py#L9 AST100: Asserts should only be used in tests. Asserts are typically bypassed in a production environment. Found in 'assert len(data) >= MINIMUM_MESSAGE_SIZE - 2'.
- [x] file:///github/workspace/velbusaio/util.py#L10 AST100: Asserts should only be used in tests. Asserts are typically bypassed in a production environment. Found in 'assert len(data) <= MAXIMUM_MESSAGE_SIZE - 2'.
- [x] file:///github/workspace/velbusaio/util.py#L38 AST100: Asserts should only be used in tests. Asserts are typically bypassed in a production environment. Found in 'assert 0 <= idx < 8'.
- [x] file:///github/workspace/velbusaio/util.py#L42 AST100: Asserts should only be used in tests. Asserts are typically bypassed in a production environment. Found in 'assert 0 <= idx < 8'.
- [x] file:///github/workspace/velbusaio/util.py#L43 AST100: Asserts should only be used in tests. Asserts are typically bypassed in a production environment. Found in 'assert isinstance(value, bool)'.
- [x] enable warnings as errors in the workflow