Skip to content

Conversation

mschuettlerTNG
Copy link
Contributor

Description:

This PR addresses various coverity findings.

Changes Made:

  • don't send x-powered-by header on media server
  • re-enable certificate verification in downloader
  • switch from md5 to sha256 for file caching

Testing Done:

Tested locally on B580

Checklist:

  • I have tested the changes locally.
  • I have self-reviewed the code changes.

Comment on lines +68 to +69
response = requests.get(
url,

Check warning

Code scanning / Bandit

Call to requests without timeout Warning

Call to requests without timeout
)
fw = open(file_path, "ab")
else:
response = requests.get(url, stream=True)

Check warning

Code scanning / Bandit

Call to requests without timeout Warning

Call to requests without timeout
@@ -361,7 +360,7 @@
self.build_queue(file_list)
file = self.file_queue.get_nowait()

response = requests.head(file.url, verify=False, headers=headers, allow_redirects=True)
response = requests.head(file.url, headers=headers, allow_redirects=True)

Check warning

Code scanning / Bandit

Call to requests without timeout Warning

Call to requests without timeout
@Nuullll Nuullll merged commit 687d7bb into intel:dev Aug 5, 2025
7 checks passed
@mschuettlerTNG mschuettlerTNG deleted the address-coverity-report branch August 5, 2025 07:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants