From 2a287c65f44433dd310835ccc01a8046b030d95b Mon Sep 17 00:00:00 2001 From: Username Date: Tue, 23 Dec 2025 22:53:52 +0100 Subject: [PATCH] fix: use nosec for bandit SQL injection suppression --- app/audit.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/audit.py b/app/audit.py index 0adc4ad..aa8a6a0 100644 --- a/app/audit.py +++ b/app/audit.py @@ -143,7 +143,7 @@ def query_audit_log( # Get total count count_row = db.execute( - f"SELECT COUNT(*) as total FROM audit_log WHERE {where_sql}", # noqa: S608 + f"SELECT COUNT(*) as total FROM audit_log WHERE {where_sql}", # nosec B608 params, ).fetchone() total = count_row["total"] if count_row else 0 @@ -155,7 +155,7 @@ def query_audit_log( FROM audit_log WHERE {where_sql} ORDER BY timestamp DESC - LIMIT ? OFFSET ?""", # noqa: S608 + LIMIT ? OFFSET ?""", # nosec B608 [*params, limit, offset], ).fetchall()