Merge pull request #175 from edwarddavidbaker/bandit-updates

ci: Bandit updates
intel · Sep 16, 2024 · d2d1313 · d2d1313
2 parents 7ab6504 + 313d60b
commit d2d1313
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -1 +1 @@
-bandit[sarif]
+bandit[sarif]==1.7.9
diff --git a/scripts/ci/verify_mapfile/requirements.txt b/scripts/ci/verify_mapfile/requirements.txt
@@ -1 +1 @@
-jsonschema
+jsonschema==4.23.0
diff --git a/scripts/metric.py b/scripts/metric.py
@@ -562,7 +562,7 @@ def ParsePerfJson(orig: str) -> Expression:
     raise SyntaxError(f'Parsing expression:\n{orig}') from e
   _RewriteIfExpToSelect().visit(parsed)
   parsed = ast.fix_missing_locations(parsed)
-  return _Constify(eval(compile(parsed, orig, 'eval')))
+  return _Constify(eval(compile(parsed, orig, 'eval'))) #nosec B307
 
 
 def RewriteMetricsInTermsOfOthers(metrics: list[Tuple[str, Expression]]