mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-09-30 19:21:33 +02:00
Three test fixtures pass a string-shaped /tmp path into PrintArchive rows. The file is never created — the field is just a DB column the ORM accepts as a string — but Bandit's B108 rule fires on any literal /tmp/ path it sees in source. Suppress with the same `# nosec B108` marker convention test_archives_api.py and test_queue_start_user_attribution.py already use for the same shape.