From b10eded5141d7d772c7768df35a20f6d910b1216 Mon Sep 17 00:00:00 2001 From: Jared Vititoe Date: Tue, 14 Apr 2026 12:40:10 -0400 Subject: [PATCH] Suppress bandit B201 false positive in dev runner app.run(debug=True) is only reached via __main__ (dev mode). Production runs gunicorn, never this block. Co-Authored-By: Claude Sonnet 4.6 --- app.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app.py b/app.py index ae49d10..f6be5c8 100644 --- a/app.py +++ b/app.py @@ -466,4 +466,4 @@ def health(): if __name__ == '__main__': - app.run(debug=True, host='0.0.0.0', port=5000) + app.run(debug=True, host='0.0.0.0', port=5000) # nosec B201 — dev runner only; production uses gunicorn