Nicolas Simonds

Using `# nosec BXXX` annotation in a nested dict causes "higher" annotations to be ignored

4

### Describe the bug Using a `# nosec BXXX` annotation inside a nested data structure appears to cause "higher" `nosec` annotations to be ignored: ``` Test results: >> Issue: [B108:hardcoded_tmp_directory]...

echo_via_pager with generators leaves terminal in broken state

3

# Steps to reproduce Run the following test case: ``` import click def output_generator(): counter = 0 while True: yield "this is a line of output\n" if counter == 1024:...

The garbage-collection cronjob will cause the registry to go into an inconsistent state if the blob cache is not cleared afterward. Since the cronjob has no facility for doing that,...

Garbage collection cronjob leaves registry in an inconsistent state

4

# Prerequisites * `kubectl` * `skopeo` * A deployed registry configured with `persistence.deleteEnabled = true` and `garbageCollect.enabled = true` # Steps to reproduce ## Setup ``` export REGISTRY=$NAME_OF_REGISTRY_INGRESS export REGISTRY_POD=$NAME_OF_REGISTRY_POD_FROM_KUBECTL...

Modernize Python tooling

2

Move all configs into `pyproject.toml`, switch test/packaging to use Hatch, and do all the linting with Ruff. Fix issues that Ruff turned up, and annotate/ignore the pieces that it got...

- Leave already-set concurrency values alone, always. - Fix some unit tests that were throwing `InvalidJobSignatureError` errors - Fix incompatibilties with tox >= 4.0 Fixes: Issue #27

Restarting the engine unconditionally resets the max_concurrency values

2

This one is a bit complicated, but: # Preamble A test case script: ``` import time import spinach sp = spinach.Engine(spinach.RedisBroker()) @sp.task(name='nap', max_retries=1, max_concurrency=8) def nap(job_id): print(f"{job_id:3} Zzzz...") time.sleep(5) batch...

# Steps to reproduce Run this test case: ``` import marshmallow as mm class LOL(mm.Schema): url = mm.fields.Url(schemes={'file'}) LOL().load(dict(url="file:///var/storage/somefile.zip")) ``` # Expected result ``` {'url': 'file:///var/storage/somefile.zip'} ``` # Actual behavior...

Feature Request: FailFS

1

The `MemFS` is great for unit tests, and I absolutely adore your implementation. But it does present challenges when attempting to test failure modes, since it, you know, works really...

At least in the case of Debian Bookworm, the Go 1.22.3 runtime on Linux builds Gilt just fine. It can even cross-compile working Universal binaries for Darwin. Quit drinking the...