diff --git a/backend/awg_api/_gate_probe.py b/backend/awg_api/_gate_probe.py index 07bb2a8..10f3c55 100644 --- a/backend/awg_api/_gate_probe.py +++ b/backend/awg_api/_gate_probe.py @@ -1,15 +1,15 @@ -"""CI-пробник для негативного прогона гейта security (bandit). +"""CI probe: intentionally insecure module for the negative security-gate run. -Содержит намеренно небезопасный вызов `subprocess.call(..., shell=True)` — -bandit B602, severity HIGH. Файл живёт только в ветке `ci/17-gate-negative` -и удаляется вместе с ней; в `main`/`feat/*` его нет. +Lives only on the ``ci/17-gate-negative`` branch (deleted together with it); +it is not present in ``main`` or ``feat/*``. + +Contains a deliberately unsafe ``subprocess.call(..., shell=True)`` call — +bandit B602, severity HIGH. """ -from __future__ import annotations - import subprocess def run_probe(cmd: str) -> int: - """Намеренно небезопасно: shell=True (bandit B602 -> HIGH).""" + """Deliberately unsafe: shell=True (bandit B602 -> HIGH).""" return subprocess.call(cmd, shell=True) # noqa: S602