style: Make bandit ♥

Author: kalkin

glv/providers.py

@@ -90,8 +90,8 @@ def authorization(self) -> Optional[Tuple[str, str]]:
         try:
             auth_store = netrc.netrc()
             auth_tupple = auth_store.authenticators(self._url.host)
-        except netrc.NetrcParseError as e:
-            print(str(e), file=sys.stderr)
+        except netrc.NetrcParseError as exc:
+            print(str(exc), file=sys.stderr)
             auth_tupple = None
         except FileNotFoundError:
             auth_tupple = None
@@ -137,7 +137,7 @@ def enabled(repo) -> bool:
                 _url = repo.remotes['origin'].url
             url = urllib3.util.parse_url(_url)
             result = url.hostname == 'github.com'
-        except Exception:  # pylint: disable=broad-except
+        except Exception:  # nosec pylint: disable=broad-except
             pass
         LOG.debug('github-api: enabled %s', result)
         return result
@@ -218,7 +218,7 @@ def enabled(repo) -> bool:
             if repo.remotes:
                 url = urllib3.util.parse_url(repo.remotes['origin'].url)
                 return url.hostname.startswith('bitbucket')
-        except Exception:  # pylint: disable=broad-except
+        except Exception:  # nosec pylint: disable=broad-except
             pass
         return False
 

glv/vcs/__init__.py

@@ -23,7 +23,7 @@
 import logging
 import os
 import os.path
-import subprocess
+import subprocess  # nosec
 from typing import Dict, List, Set
 
 import xdg
@@ -140,11 +140,12 @@ def fetch_missing_data(commit: Commit, repo: Repository) -> bool:
     LOG.info('Fetching missisng data for %s', oid)
     LOG.debug('Executing %s', ' '.join(cmd))
     try:
-        subprocess.run(cmd,
-                       capture_output=False,
-                       stdout=subprocess.DEVNULL,
-                       stderr=subprocess.DEVNULL,
-                       check=True)
+        subprocess.run(  # nosec
+            cmd,
+            capture_output=False,
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+            check=True)
     except subprocess.CalledProcessError:
         return False
     return True