search

PyCQA / isort

A Python utility / library to sort imports.
https://pycqa.github.io/isort/
MIT License
6.45k stars 574 forks source link

Ignore `bandit`'s CVE reported by `safety` #2256

Open sobolevn opened 5 months ago

sobolevn commented 5 months ago

It is a dev-dependency and there's no real vulnerability. This is why a job in my CI fails: https://github.com/PyCQA/isort/pull/2241

Link to CVE: https://data.safetycli.com/v/64484/f17

Or you can bump bandit to 1.7.8: https://pypi.org/project/bandit/1.7.8/