Ruff: Fix #11090

[kiblik]

Fix for #11090

Resolve

• "warning: TRY302 has been remapped to TRY203." by removal from the list
• FURB156 with autofix

[dryrunsecurity]

DryRun Security Summary

The changes in this pull request involve updates to various dependencies and configuration files used in the DefectDojo application, including a minor version update to the boto3 library, changes to the ruff.toml configuration file, an update to the version of the ruff package, and the addition of a comprehensive test suite for the AppCheckWebApplicationScannerParser class.

Expand for full summary

Summary:

The changes in this pull request involve updates to various dependencies and configuration files used in the DefectDojo application. These changes include:

1. An update to the boto3 library in the requirements.txt file, which is used for Celery Broker AWS (SQS) support. This is a minor version update and is unlikely to introduce any significant security implications.

2. Changes to the ruff.toml configuration file, which is used to configure the Ruff linter. The changes involve the removal of a specific linting rule, and while this may not have a direct impact on security, it's important to review the overall linting configuration to ensure it aligns with the project's security requirements.

3. An update to the version of the ruff package in the requirements-lint.txt file. This is a routine dependency update and does not appear to introduce any immediate security concerns, but it's recommended to review the release notes and change logs to understand any potential security-related changes.

4. The addition of a comprehensive test suite for the AppCheckWebApplicationScannerParser class, which is used to parse the output of the AppCheck web application scanner. This demonstrates a well-designed and thoroughly tested application security parser, which is an important component of a secure software development lifecycle.

Files Changed:

1. requirements.txt: The boto3 library was updated from version 1.35.42 to 1.35.43. This is a minor version update and is unlikely to introduce any significant security implications.

2. ruff.toml: The changes involve the removal of the "TRY302" rule from the list of selected rules in the select section. While this may not have a direct impact on security, it's important to review the overall linting configuration to ensure it aligns with the project's security requirements.

3. requirements-lint.txt: The version of the ruff package was updated from 0.6.9 to 0.7.0. This is a routine dependency update and does not appear to introduce any immediate security concerns, but it's recommended to review the release notes and change logs to understand any potential security-related changes.

4. unittests/tools/test_appcheck_web_application_scanner_parser.py: This file contains a comprehensive test suite for the AppCheckWebApplicationScannerParser class, which is used to parse the output of the AppCheck web application scanner. The test suite covers various scenarios, including parsing scan results with different types of vulnerabilities, handling duplicate findings, and testing related utility functions.

Code Analysis

We ran 9 analyzers against 4 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[mtesauro]

Approved