Fix security output

bin/security.sh

@@ -6,4 +6,4 @@ export FREENIT_ENV="test"
 
 
 setup no no
-bandit `find freenit -type f -name '*.py' | grep -v 'freenit/cli\.py'`
+bandit `find freenit -type f -name '*.py' | grep -v -E 'freenit/(cli|local_config)\.py'`

freenit/api/sieve.py

@@ -74,8 +74,8 @@ async def __aexit__(self, exc_type, exc_val, exc_tb):
                 self._writer.close()
                 try:
                     await self._writer.wait_closed()
-                except Exception:
-                    pass
+                except Exception as e:
+                    log.warning("ManageSieve wait_closed error: %s", e)
 
     async def _read_response(self) -> tuple[bool, list[str]]:
         """Read lines until a terminal line (OK / NO / BYE).

freenit/app.py

@@ -1,6 +1,6 @@
 import asyncio
 import os
-import subprocess
+import subprocess  # nosec: B404
 from contextlib import asynccontextmanager
 from fastapi import FastAPI
 
@@ -14,7 +14,7 @@
 def _run_migrations() -> None:
     env = os.environ.copy()
     env.setdefault("FREENIT_ENV", "prod")
-    subprocess.run(["oxyde", "migrate"], check=True, env=env)
+    subprocess.run(["oxyde", "migrate"], check=True, env=env)  # nosec
 
 
 @asynccontextmanager

freenit/base_config.py

@@ -148,7 +148,7 @@ class BaseConfig:
     xmpp = XMPP()
     stalwart_url = "http://stalwart.example.com"
     stalwart_admin = "%admin"
-    stalwart_admin_pass = ""
+    stalwart_admin_pass = ""  # nosec: B105
 
     def __init__(self):
         dburl = self.dburl

freenit/project/project/base_config.py

@@ -6,7 +6,7 @@ class BaseConfig(FreenitBaseConfig):
     version = "0.0.1"
     stalwart_url = "http://stalwart.example.com"
     stalwart_admin = "%admin"
-    stalwart_admin_pass = ""
+    stalwart_admin_pass = ""  # nosec: B105
 
 
 class DevConfig(BaseConfig):