Clean-up security advisories
- Dominant language
- Python
- Stars
- 791
- Forks
- 451
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 4
Description
We seem to `log.info` a few things that are identified as security advisories, we should fix those.
@pllim - once you're back, would you mind having a look and advise which one you think are in fact a problem, and if there is a better way to do it? I suppose not logging the queries are doable, or just do those logs when we're in verbose/debug mode?
https://github.com/astropy/astroquery/security/code-scanning
Contributor guide
Research direction
Start by reviewing the security code-scanning findings linked in the issue and locating the log.info calls that expose the reported advisories. Determine which logged values are security problems and whether they should be removed or limited to verbose/debug mode. Done means the confirmed advisories are addressed and the code-scanning results no longer flag them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100