ci(ruff): add bandit checks (#575)

Added bandit checks to continuous integration.

Updated sources to pass bandit checks:
- replaced asserts
- added timeouts to requests
- added checks for process command execution
- changed to 127.0.0.1 as default IP address for EOS and EOSdash for security reasons

Added a rudimentary check for outdated config files.

BREAKING CHANGE: Default IP address for EOS and EOSdash changed to 127.0.0.1

Signed-off-by: Bobby Noelte <b0661n0e17e@gmail.com>
This commit is contained in:
Bobby Noelte
2025-06-03 08:30:37 +02:00
committed by GitHub
parent aa39ff475c
commit 3421b2303b
34 changed files with 163 additions and 86 deletions

View File

@@ -220,9 +220,9 @@
"server": {
"$ref": "#/components/schemas/ServerCommonSettings",
"default": {
"eosdash_host": "0.0.0.0",
"eosdash_host": "127.0.0.1",
"eosdash_port": 8504,
"host": "0.0.0.0",
"host": "127.0.0.1",
"port": 8503,
"startup_eosdash": true,
"verbose": false
@@ -2279,7 +2279,7 @@
"type": "null"
}
],
"default": "0.0.0.0",
"default": "127.0.0.1",
"description": "EOSdash server IP address.",
"title": "Eosdash Host"
},
@@ -2306,7 +2306,7 @@
"type": "null"
}
],
"default": "0.0.0.0",
"default": "127.0.0.1",
"description": "EOS server IP address.",
"title": "Host"
},