lookit / lookit/lookit-api

Use ExpectedBucketOwner param in S3 calls

Open Beginner friendly
#1,738 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
12
Forks
21
Avg merge
5d 19h
Merged PRs (30d)
5

Description

SonarCloud flagged the following lines:

```python
try:
uploads_response = S3_CLIENT.list_multipart_uploads(Bucket=bucket_name)
```
and

```python
try:
file_parts_response = S3_CLIENT.list_parts(
```

For both of these, the message is: "Add the 'ExpectedBucketOwner' parameter to verify S3 bucket ownership."

Contributor guide

Open the contributing guide

Research direction

Search the Python codebase for the list_multipart_uploads and list_parts S3 calls shown in the issue. Start by reading their surrounding upload logic, then ensure both calls verify bucket ownership with the requested parameter and run the relevant existing tests if available.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, python
Domain
backend, cloud, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
62/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.