Suppress bandit B201 false positive in dev runner

app.run(debug=True) is only reached via __main__ (dev mode). Production runs gunicorn, never this block. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-14 12:40:10 -04:00
parent 903dc960c3
commit 9dc10422e3
1 changed files with 1 additions and 1 deletions
@@ -466,4 +466,4 @@ def health():


 if __name__ == '__main__':
-    app.run(debug=True, host='0.0.0.0', port=5000)
+    app.run(debug=True, host='0.0.0.0', port=5000)  # nosec B201 — dev runner only; production uses gunicorn