-
Notifications
You must be signed in to change notification settings - Fork 4
Description
There were 3 with critical severity:
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/3
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/4
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/5
But for now they are dismissed, as they are related by the 'code injection' done to server.py done by a user (aka inspecting IR for a user code). It's part of the design, moving forward in case if the app is moved away from localhost - user code should be guarded.
There are 2 with medium severity:
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/1
https://github.com/MrSidims/PytorchExplorer/security/code-scanning/2
and tons of warnings, some of which are legit, but most of them are false positive or require security checking scripts adjustments (for example setup env for them properly). Or they are code style recommendations from codacy.