maziggy ac72aacbfa Tool: Bandit B108 ...

Severity: Warning ×4
  Issue: "Probable insecure usage of temp file/directory" — /tmp/<filename> literals used as synthetic DB field values in two integration tests
  Status: Fixed
  ────────────────────────────────────────
  Tool: CodeQL Python / JS
  Severity: Pending
  Issue: Still running on the head SHA
  Status: —
  ────────────────────────────────────────
  Tool: Trivy container scan
  Severity: Pending
  Issue: Still running
  Status: —
  ────────────────────────────────────────
  Tool: Bandit (Python Security Analysis)
  Severity: Pass
  Issue: The separate Bandit run on the changes already passes
  Status: ✓

2026-05-11 13:15:30 +02:00

..

__init__.py

…

test_advanced_auth_api.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

test_ams_history_api.py

…

test_ams_labels_api.py

Add tests, docs, and lint fix for AMS Info Card feature (#570)

2026-03-05 08:46:39 +01:00

test_api_key_cloud_access.py

fix(api-keys): slice + slicer-presets routes resolve cloud token via key owner (#1182 follow-up)

2026-05-02 08:10:47 +02:00

test_archive_purge_api.py

● feat(#1008): honour reprint dates in archive purge + clarify purge UX

2026-04-23 17:38:41 +02:00

test_archives_api.py

feat(stats): add /archives/slim endpoint and fix dashboard bugs

2026-03-01 03:11:28 -10:00

test_auth_api.py

Feature/makerworld (#1099)

2026-04-23 14:10:14 +02:00

test_auth_apikey_rbac.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_available_filaments.py

Show filament subtypes in all mapping dropdowns (#624)

2026-03-06 08:35:06 +01:00

test_background_dispatch_api.py

fix(dispatch): clean up transient library upload from Direct-Print flow (#730)

2026-04-21 14:10:04 +02:00

test_camera_api.py

fix(#1089): camera stream fan-out broadcaster

2026-04-25 09:56:45 +02:00

test_client_ip.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

test_cloud_auth.py

Post work PR #1013

2026-04-18 12:39:07 +02:00

test_color_catalog_extras.py

feat(inventory): multi-colour gradients, transparency, visual effects (#1154)

2026-04-29 09:13:33 +02:00

test_color_map_api.py

refactor(colors): color_catalog is the single source of truth (#857)

2026-04-11 12:10:45 +02:00

test_cost_statistics.py

…

test_discovery_api.py

…

test_endpoint_auth.py

…

test_external_folders_api.py

fix(#1112): cross-boundary file move actually relocates bytes

2026-04-27 16:48:47 +02:00

test_external_links_api.py

…

test_filaments_api.py

…

test_gcode_viewer.py

fix(docker): copy gcode_viewer assets into the production image (issue #1218)

2026-05-06 14:23:39 +02:00

test_github_backup_api.py

feat(#1239): Update Gitea and Forgejo due to API changes from initial cut (#1255)

2026-05-11 12:27:41 +02:00

test_groups_api.py

feat(auth): permission-delegated Settings + Group editor routes; fix group-edit cache stale-read (#1083)

2026-04-22 19:10:18 +02:00

test_inventory_assign.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_labels.py

feat(inventory): printable PDF spool labels in 4 sizes (#809)

2026-05-05 12:29:57 +02:00

test_library_api.py

Add tests, docs, and changelog for #920 + #932

2026-04-10 13:09:21 +02:00

test_library_slice_api.py

feat(slicer): bundle dispatch path for library slice route

2026-05-06 09:42:15 +02:00

test_library_trash_api.py

Tool: Bandit B108

2026-05-11 13:15:30 +02:00

test_long_lived_tokens_api.py

feat(#1108): long-lived camera-stream tokens + fix(#1089) audit-pass tweaks

2026-04-25 10:44:37 +02:00

test_maintenance_api.py

…

test_metrics_api.py

…

test_mfa_api.py

fix(oidc): use preferred_username/name claim for auto-created username (#1173) (#1176)

2026-05-02 12:14:32 +02:00

test_notifications_api.py

Add notification for no spool assigned for active trays, improve usage tracker logic in edge cases (#789)

2026-03-24 11:31:32 +01:00

test_obico_api.py

fix(obico): revert POST-bytes approach — Obico /p/ is GET-only

2026-04-18 08:50:46 +02:00

test_ownership_permissions.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

test_pending_upload_display_name.py

Tool: Bandit B108

2026-05-11 13:15:30 +02:00

test_print_lifecycle.py

fix(scheduler): raise plate-clear gate for every terminal status (#1171)

2026-05-01 08:13:52 +02:00

test_print_queue_api.py

fix(queue): update LibraryFile.print_count and last_printed_at on completion (#1008)

2026-04-19 12:15:25 +02:00

test_printers_api.py

fix(http): RFC 6266-encode Content-Disposition so non-ASCII filenames don't crash response (issue #1245)

2026-05-08 14:06:40 +02:00

test_projects_api.py

fix(projects): portal-mounted hover preview for cover thumbnails (#1155)

2026-05-01 13:23:59 +02:00

test_security_headers.py

fix(security): allow iframe embedding from trusted origins via env var (#1191)

2026-05-02 12:32:02 +02:00

test_security.py

feat(encryption): MFA at-rest encryption auto-bootstrap with status UI (#1219) (#1231)

2026-05-08 09:01:51 +02:00

test_settings_api_key_scrubbing.py

fix(spoolbuddy): lower /update permission to INVENTORY_UPDATE so kiosk's own Settings -> Update button works

2026-05-08 14:28:41 +02:00

test_settings_api.py

Add configurable default print options (#858)

2026-04-01 10:30:05 +02:00

test_sjf_scheduling.py

chore(tests): suppress B108 on dummy /tmp test fixtures

2026-04-19 09:48:10 +02:00

test_smart_plugs_api.py

Add REST/Webhook smart plug type (#472)

2026-04-01 10:06:01 +02:00

test_spoolbuddy_spoolman_nfc.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolbuddy.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_ams_sync.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_api.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_filament_patch.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_inventory_api.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_k_profiles.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_slot_assignment_mqtt.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_slot_assignments.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_slot_concurrency.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_static_html_cache_headers.py

fix(tests): make SPA cache-header tests work without a built frontend

2026-05-05 14:35:08 +02:00

test_support_api.py

…

test_system_api.py

…

test_tailscale_api.py

feat(virtual-printer): add Tailscale opt-out toggle (closes #701 point 3) (#1070)

2026-04-24 09:59:09 +02:00

test_trace_middleware.py

feat(observability): trace ID column on every log line + X-Trace-Id header

2026-04-26 10:01:17 +02:00

test_updates_api.py

feat(updates): detect HA Supervisor addon and defer update UI to it (#1167)

2026-05-01 08:01:19 +02:00

test_user_notifications_api.py

Post work PR #693

2026-03-17 12:24:36 +01:00

test_virtual_printer_api.py

refactor(virtual-printer): drop Tailscale LE cert path, keep toggle informational

2026-05-03 14:58:29 +02:00