astropy / astropy/astroquery

Clean-up security advisories

Open
#2,191 0 comments 0 reactions 0 assignees View on GitHub
query
Dominant language
Python
Stars
791
Forks
451
Avg merge
1d 3h
Merged PRs (30d)
4

Description

We seem to `log.info` a few things that are identified as security advisories, we should fix those.

@pllim - once you're back, would you mind having a look and advise which one you think are in fact a problem, and if there is a better way to do it? I suppose not logging the queries are doable, or just do those logs when we're in verbose/debug mode?

https://github.com/astropy/astroquery/security/code-scanning

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the security code-scanning findings linked in the issue and locating the log.info calls that expose the reported advisories. Determine which logged values are security problems and whether they should be removed or limited to verbose/debug mode. Done means the confirmed advisories are addressed and the code-scanning results no longer flag them.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.