Skip to content

SCA Finding fixed - #421

Closed
SB-rohandhiman wants to merge 2 commits into
masterfrom
PLAT-16740-SCA-FINDING
Closed

SCA Finding fixed#421
SB-rohandhiman wants to merge 2 commits into
masterfrom
PLAT-16740-SCA-FINDING

Conversation

@SB-rohandhiman

@SB-rohandhiman SB-rohandhiman commented Aug 12, 2026

Copy link
Copy Markdown

Addresses PLAT-16976, PLAT-16740, and PLAT-16763.

GitHub Actions (maze-runner.yml, python-package.yml)

  • Added permissions: contents: read at top level
  • Added permissions: contents: none on test-done job
  • Follows least-privilege principle for workflow tokens

Django SECRET_KEY — example files (3 files)

  • Replaced hardcoded keys with os.environ.get('DJANGO_SECRET_KEY', 'django-insecure-testonly')
  • Falls back to a clearly marked insecure test key

Django SECRET_KEY — test fixtures (5 files)

  • Replaced random-looking keys with django-insecure-testonly
  • No env var needed for test fixtures

Changelog

  • Added PR reference for level parameter enhancement

@SB-rohandhiman
SB-rohandhiman requested review from SB-PawanN and SB-jigneshR and a lite review from Copilot August 12, 2026 11:18
@SB-rohandhiman
SB-rohandhiman removed the request for review from Copilot August 12, 2026 11:19

@SB-PawanN SB-PawanN left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants