Phase 3: Coordinator Code Quality (Ruff, Mypy, Pip) #365

Closed
opened 2026-02-12 18:33:53 +00:00 by jason.woltje · 0 comments
Owner

Findings

Ruff Check (20 errors, 9 auto-fixable)

  • UP035: Import Callable from collections.abc (1)
  • UP042: Use StrEnum instead of str+Enum (5)
  • E501: Line too long (5)
  • F401: Unused imports (4)
  • UP045: Use X | None instead of Optional (1)
  • I001: Import block unsorted (2)
  • F401: Unused imports in tests (2)

Mypy (1 error)

  • src/main.py:144: Incompatible type for add_exception_handler

Pip Audit (2 CVEs)

  • pip 24.0 → CVE-2025-8869, CVE-2026-1703 (fix: upgrade to pip >= 25.3)

Bandit (1 Medium)

  • B104: Hardcoded 0.0.0.0 bind address (acceptable for container, document)

Acceptance Criteria

  • All ruff check errors fixed
  • Mypy passes cleanly
  • pip upgraded in Dockerfile
  • Bandit medium finding documented/addressed
## Findings ### Ruff Check (20 errors, 9 auto-fixable) - UP035: Import Callable from collections.abc (1) - UP042: Use StrEnum instead of str+Enum (5) - E501: Line too long (5) - F401: Unused imports (4) - UP045: Use X | None instead of Optional (1) - I001: Import block unsorted (2) - F401: Unused imports in tests (2) ### Mypy (1 error) - src/main.py:144: Incompatible type for add_exception_handler ### Pip Audit (2 CVEs) - pip 24.0 → CVE-2025-8869, CVE-2026-1703 (fix: upgrade to pip >= 25.3) ### Bandit (1 Medium) - B104: Hardcoded 0.0.0.0 bind address (acceptable for container, document) ## Acceptance Criteria - [ ] All ruff check errors fixed - [ ] Mypy passes cleanly - [ ] pip upgraded in Dockerfile - [ ] Bandit medium finding documented/addressed
jason.woltje added this to the M11-CIPipeline (0.0.11) milestone 2026-02-12 18:33:53 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: mosaic/stack#365