Skip to content

tweak pyproject#371

Open
sathiya-nhs wants to merge 2 commits intomasterfrom
APIM-testing
Open

tweak pyproject#371
sathiya-nhs wants to merge 2 commits intomasterfrom
APIM-testing

Conversation

@sathiya-nhs
Copy link

@sathiya-nhs sathiya-nhs commented Dec 16, 2025

Summary

  • Routine Change
  • ❗ Breaking Change
  • 🤖 Operational or Infrastructure Change
  • ✨ New Feature
  • ⚠️ Potential issues that might be caused by this change

Add any other relevant notes or explanations here. Remove this line if you have nothing to add.

Reviews Required

  • Dev
  • Test
  • Tech Author
  • Product Owner

Review Checklist

ℹ️ This section is to be filled in by the reviewer.

  • I have reviewed the changes in this PR and they fill all or part of the acceptance criteria of the ticket, and the code is in a mergeable state.
  • If there were infrastructure, operational, or build changes, I have made sure there is sufficient evidence that the changes will work.
  • I have ensured the changelog has been updated by the submitter, if necessary.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Dec 16, 2025

Quality Gate Failed Quality Gate failed

Failed conditions
E Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

github-advanced-security[bot]
github-advanced-security bot found potential problems Dec 16, 2025
View reviewed changes
.direnv/python-3.8.20/lib/python3.8/site-packages/PyJWT-2.8.0.dist-info/METADATA
>>> import jwt
>>> encoded = jwt.encode({"some": "payload"}, "secret", algorithm="HS256")
>>> print(encoded)
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb21lIjoicGF5bG9hZCJ9.4twFt5NiznN84AWoo1d7KO1T_yoc0Z6XOpOVswacPZg

Check failure

Code scanning / SonarCloud

JSON Web Tokens should not be disclosed High library

Make sure this JSON Web Token (JWT) gets revoked, changed, and removed from the code. See more on SonarQube Cloud
...ython-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc6749/grants/authorization_code.py

POST /token HTTP/1.1
Host: server.example.com
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
.direnv/python-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc6749/grants/base.py

POST /token HTTP/1.1
Host: server.example.com
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
...ython-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc6749/grants/client_credentials.py

POST /token HTTP/1.1
Host: server.example.com
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
...env/python-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc6749/grants/refresh_token.py

POST /token HTTP/1.1
Host: server.example.com
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
...python3.8/site-packages/authlib/oauth2/rfc6749/grants/resource_owner_password_credentials.py

POST /token HTTP/1.1
Host: server.example.com
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
.direnv/python-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc7009/revocation.py
POST /revoke HTTP/1.1
Host: server.example.com
Content-Type: application/x-www-form-urlencoded
Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
.direnv/python-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc7592/endpoint.py

DELETE /register/s6BhdRkqt3 HTTP/1.1
Host: server.example.com
Authorization: Bearer reg-23410913-abewfq.123483

Check failure

Code scanning / SonarCloud

HTTP Authentication Bearer tokens should not be disclosed High library

Make sure this Bearer Authentication tokens get revoked, changed, and removed from the code. See more on SonarQube Cloud
.direnv/python-3.8.20/lib/python3.8/site-packages/authlib/oauth2/rfc7592/endpoint.py
PUT /register/s6BhdRkqt3 HTTP/1.1
Accept: application/json
Host: server.example.com
Authorization: Bearer reg-23410913-abewfq.123483

Check failure

Code scanning / SonarCloud

HTTP Authentication Bearer tokens should not be disclosed High library

Make sure this Bearer Authentication tokens get revoked, changed, and removed from the code. See more on SonarQube Cloud
.direnv/python-3.8.20/lib/python3.8/site-packages/pytest_nhsd_apim/apigee_apis.py
url=url,
params=self.config.params,
headers={
"Authorization": "Basic ZWRnZWNsaTplZGdlY2xpc2VjcmV0",

Check failure

Code scanning / SonarCloud

HTTP authentication credentials should not be disclosed High library

Make sure these Basic Access Authentication credentials get revoked, changed, and removed from the code. See more on SonarQube Cloud
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sathiya-nhs