ci: fix bandit

italia · Nov 21, 2024 · b72d1be · b72d1be
1 parent d3466dc
commit b72d1be
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/pyeudiw/sd_jwt/issuer.py b/pyeudiw/sd_jwt/issuer.py
@@ -155,8 +155,9 @@ def _create_sd_claims_object(self, user_claims: Dict):
 
         # Add decoy claims if requested
         if self._add_decoy_claims:
+            sr = secrets.SystemRandom()
             for _ in range(
-                random.randint(self.DECOY_MIN_ELEMENTS, self.DECOY_MAX_ELEMENTS)
+                sr.randint(self.DECOY_MIN_ELEMENTS, self.DECOY_MAX_ELEMENTS)
             ):
                 sd_claims[SD_DIGESTS_KEY].append(self._create_decoy_claim_entry())
 

diff --git a/pyeudiw/sd_jwt/utils/yaml_specification.py b/pyeudiw/sd_jwt/utils/yaml_specification.py
@@ -58,7 +58,7 @@ def from_yaml(cls, loader, node):
                     )
                 )
 
-    return yaml.load(f, Loader=yaml.FullLoader)
+    return yaml.load(f, Loader=yaml.FullLoader) # nosec
 
 """
 Takes an object that has been parsed from a YAML file and removes the SDObj wrappers.
@@ -71,4 +71,4 @@ def remove_sdobj_wrappers(data):
     elif isinstance(data, list):
         return [remove_sdobj_wrappers(value) for value in data]
     else:
-        return data
+        return data