GRM-24: feat: bandit integration (#1)

Co-authored-by: Emil Simeonov <emil@theliberatededge.org> Reviewed-on: #1
2026-06-19 21:17:39 +00:00
parent d8c31238bd
commit d949bd3444
21 changed files with 325 additions and 75 deletions
@@ -146,6 +146,9 @@ def test_main_module_block() -> None:
        source = source.replace('if __name__ == "__main__":\n    main()\n', "")
        namespace = dict(vcm.__dict__)
        exec(compile(source, vcm.__file__, "exec"), namespace)
+        # exec() redefines get_branch() from source, overwriting the mock.
+        # Restore the patched mock so main() uses it.
+        namespace["get_branch"] = vcm.get_branch
        namespace["main"]([msg_path], standalone_mode=False)

    os.unlink(msg_path)