Skip to content

Conversation

@hasan7n
Copy link
Contributor

@hasan7n hasan7n commented Jan 1, 2026

No description provided.

@hasan7n hasan7n requested a deployment to testing-external-code January 1, 2026 10:13 — with GitHub Actions Waiting
@github-actions
Copy link
Contributor

github-actions bot commented Jan 1, 2026

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

os.makedirs(workdir, exist_ok=True)
pod_path = os.path.join(workdir, "pod.yaml")
with open(pod_path, "w") as f:
f.write(contents)

Check failure

Code scanning / CodeQL

Clear-text storage of sensitive information High

This expression stores
sensitive data (secret)
as clear text.
@app.route("/upload", methods=["POST"])
def upload_file():
file = request.files["file"]
file.save(f"{file.filename}")

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.
def upload_file():
file = request.files["file"]
file.save(f"{file.filename}")
with open(f"{file.filename}") as f:

Check failure

Code scanning / CodeQL

Uncontrolled data used in path expression High

This path depends on a
user-provided value
.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant