Wang Mingyu 99b4f570ff python3-bandit: upgrade 1.7.7 -> 1.7.8 ...

Changelog:
============
-Incorrect tag naming in readme
-Utilize PyPI's trusted publishing
-Bump sigstore/cosign-installer from 3.3.0 to 3.4.0
-Add 1.7.7 to versions of bug template
-Use datetime to avoid updating copyright year
-filter data is safe for tarfile extractall
-Bump docker/setup-buildx-action from 3.0.0 to 3.1.0
-[B605] Add functions that are vulnerable to shell injection
-Add a SARIF output formatter

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>

2024-03-20 09:28:07 -07:00

575 B

Raw Blame History

View Raw