GRM-24: feat: bandit integration (#1)

Co-authored-by: Emil Simeonov <emil@theliberatededge.org>
Reviewed-on: #1

src/gitea_runner_manager/api_clients.py

@@ -15,10 +15,10 @@ logger = logging.getLogger("grm")
 
 def _parse_error(e: requests.HTTPError) -> tuple[int, str]:
     """Extract status code and message from an HTTPError response."""
-    response = e.response
-    status = response.status_code if response else 0
+    response = getattr(e, "response", None)
+    status = response.status_code if response is not None else 0
     try:
-        body: dict[str, Any] = response.json() if response else {}
+        body: dict[str, Any] = response.json() if response is not None else {}
         message: str = body.get("message", str(e))
     except Exception:
         message = str(e)
@@ -63,8 +63,8 @@ class GiteaClient:
         r = self._request("POST", "/branch_protections", json=config)
         return r.json()
 
-    def update_branch_protection(self, protection_id: int, config: dict[str, Any]) -> dict[str, Any]:
-        r = self._request("PATCH", f"/branch_protections/{protection_id}", json=config)
+    def update_branch_protection(self, branch: str, config: dict[str, Any]) -> dict[str, Any]:
+        r = self._request("PATCH", f"/branch_protections/{branch}", json=config)
         return r.json()
 
     def ensure_branch_protection(self, branch: str, config: dict[str, Any]) -> dict[str, Any]:
@@ -72,9 +72,8 @@ class GiteaClient:
         existing = self.list_branch_protections()
         for p in existing:
             if p.get("branch_name") == branch:
-                protection_id = p["id"]
                 update_config = {k: v for k, v in config.items() if k != "branch_name"}
-                return self.update_branch_protection(protection_id, update_config)
+                return self.update_branch_protection(branch, update_config)
         return self.create_branch_protection(config)
 
     # -- labels --