From 219cda569c30acd107330de13d5a6105c128c26d Mon Sep 17 00:00:00 2001 From: stumpylog <797416+stumpylog@users.noreply.github.com> Date: Thu, 4 Jun 2026 11:37:17 -0700 Subject: [PATCH] ruff: enable S324 (hashlib insecure hash functions) Adds usedforsecurity=False to all hashlib.md5() calls, documenting that these are used for file checksum comparison, not security. The production call in _path_matches_checksum will be replaced with compute_checksum() (SHA-256) in a separate branch. Co-Authored-By: Claude Sonnet 4.6 --- pyproject.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/pyproject.toml b/pyproject.toml index 996f11af1..acf0f7ab4 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -188,6 +188,7 @@ extend-select = [ "COM", # https://docs.astral.sh/ruff/rules/#flake8-commas-com "DTZ", # https://docs.astral.sh/ruff/rules/#flake8-datetimez-dtz "PERF", # https://docs.astral.sh/ruff/rules/#perflint-perf + "S324", # https://docs.astral.sh/ruff/rules/hashlib-insecure-hash-functions/ "DJ", # https://docs.astral.sh/ruff/rules/#flake8-django-dj "EXE", # https://docs.astral.sh/ruff/rules/#flake8-executable-exe "FBT", # https://docs.astral.sh/ruff/rules/#flake8-boolean-trap-fbt