anti 24f02c3466 fix: resolve all bandit SAST findings in templates/ ...

- Add # nosec B104 to all intentional 0.0.0.0 binds in honeypot servers
  (hardcoded_bind_all_interfaces is by design — deckies must accept attacker connections)
- Add # nosec B101 to assert statements used for protocol validation in ldap/snmp
- Add # nosec B105 to fake SASL placeholder in ldap
- Add # nosec B108 to /tmp usage in smb template
- Exclude root-owned auto-generated decnet_logging.py copies from bandit scan
  via pyproject.toml [tool.bandit] config (synced by _sync_logging_helper at deploy)

2026-04-10 00:24:40 -04:00

..

decnet_logging.py

fix: resolve all bandit SAST findings in templates/

2026-04-10 00:24:40 -04:00

Dockerfile

fix: make setcap resilient — no-op when Python absent or symlink-only

2026-04-09 19:04:52 -04:00

entrypoint.sh

Add per-service customization, stealth hardening, and BYOS support

2026-04-04 04:08:27 -03:00

server.py

fix: resolve all bandit SAST findings in templates/

2026-04-10 00:24:40 -04:00