Skip to content

Commit 290382e

Browse files
rwgkrwgk
committed
Exclude the inactive CUDA 12 import from the security scan
Signed-off-by: Ralf W. Grosse-Kunstleve <[email protected]>
1 parent 36807f7 commit 290382e

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

‎.github/workflows/bandit.yml‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,8 +42,10 @@ jobs:
4242
echo "codes=$(uvx toml2json ./ruff.toml | jq -r '.lint.ignore | map(select(test("^S\\d+"))) | join(",")')" >> "$GITHUB_OUTPUT"
4343
- name: Perform Bandit Analysis using Ruff
4444
uses: astral-sh/ruff-action@278981a28ce3188b1e39527901f38254bf3aac89 # v4.1.0
45+
# Preserve the inactive CUDA 12 snapshot; the source-integration layer
46+
# adapts its security annotations and removes this temporary exclusion.
4547
with:
46-
args: "check --select S --ignore ${{ steps.ignore-codes.outputs.codes }} --output-format sarif --output-file results.sarif"
48+
args: "check --select S --ignore ${{ steps.ignore-codes.outputs.codes }} --extend-exclude cuda_bindings_12 --output-format sarif --output-file results.sarif"
4749
- name: Upload SARIF file
4850
uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
4951
with:

0 commit comments

Comments
 (0)