Scan report

hashicorp / terraform-provider-aws

View on GitHub (opens in a new tab)
Go
11095 stars
Scanned 24 Sep 2026, 06:01

Report Rescan

Vulnerability Medium

Could an attacker exploit mistakes in this code?

28 risk score

Real issues worth reviewing before you rely on this code.

High: 0
Medium: 8
Low: 42

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Low

Does this code look like it is trying to cause harm?

9 risk score

Minor issues. Worth a glance, unlikely to be urgent.

High: 3
Medium: 3
Low: 8

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview

64 total findings

Likely real: 21
Uncertain: 9
Likely noise: 34

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository has been flagged as having a medium vulnerability risk score of 28.0, which indicates that the code contains several insecure coding patterns an attacker could potentially exploit. While the overall malicious-pattern risk is low at 9.0, suggesting the code isn't intentionally harmful, there are specific issues that look more like ordinary mistakes than deliberate attacks. The scan found multiple instances of weak cryptographic hashes like SHA1 and MD5, which are outdated and should not be used for security purposes. Additionally, several lines of code appear to contain hardcoded passwords or sensitive tokens such as AWS credentials, which is a common error in production software rather than proof of malicious intent. There are also two high-severity YARA rules that detected the execution of encoded payloads and downloads followed by execution, but these were identified with very low confidence scores, meaning they likely represent false positives from test fixtures or scripts rather than active threats.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

Bandit 50

Python security linter · Vulnerability
YARA 11

Malware signature rules · Malicious pattern
GuardDog 3

Supply-chain attack heuristics · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.

Engine
GuardDog · Supply-chain attack heuristics

Counts towards
Malicious pattern

File
/internal/provider/framework/provider.go line 155

Likely real
Yes, 96% confidence

Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read]
```
Optional:    true,
				Description: "List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].",
			},
			"skip_credentials_validation": schema.BoolAttribute{
```
Engine
GuardDog · Supply-chain attack heuristics

Counts towards
Malicious pattern

File
/internal/provider/sdkv2/provider.go line 220

Likely real
Yes, 96% confidence

Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read]
```
Optional:    true,
					Description: "List of paths to shared credentials files. If not set, defaults to [~/.aws/credentials].",
					Elem:        &schema.Schema{Type: schema.TypeString},
				},
```
Engine
GuardDog · Supply-chain attack heuristics

Counts towards
Malicious pattern

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/configprovider.py line 83

Likely real
Yes, 96% confidence

Detects access to sensitive files (credentials, configs, keys) [threat-filesystem-read]
```
'AWS_SHARED_CREDENTIALS_FILE',
        '~/.aws/credentials',
        None,
    ),
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 2299

Likely real
Uncertain, 49% confidence

Use of weak SHA1 hash for security. Consider usedforsecurity=False
```
2298         args = json.dumps(args, sort_keys=True, separators=(',', ':'))
2299         argument_hash = sha1(args.encode('utf-8')).hexdigest()
2300         return self._make_file_safe(argument_hash)
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 847

Likely real
Uncertain, 49% confidence

Use of weak SHA1 hash for security. Consider usedforsecurity=False
```
846         args = json.dumps(args, sort_keys=True)
847         argument_hash = sha1(args.encode('utf-8')).hexdigest()
848         return self._make_file_safe(argument_hash)
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/utils.py line 3402

Likely real
Uncertain, 49% confidence

Use of weak SHA1 hash for security. Consider usedforsecurity=False
```
3401             input_str = session_name
3402         return hashlib.sha1(input_str.encode('utf-8')).hexdigest()
3403
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/compat.py line 162

Likely real
Uncertain, 48% confidence

Use of weak MD5 hash for security. Consider usedforsecurity=False
```
161     if MD5_AVAILABLE:
162         return hashlib.md5(*args, **kwargs)
163     else:
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/sns/test-fixtures/lambda_confirm_sns_extracted/main.py line 24

Likely real
Uncertain, 48% confidence

Audit url open for permitted schemes. Allowing use of file:/ or custom schemes is often unexpected.
```
23     try:
24         r = request.urlopen(url)
25
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/httpchecksum.py line 169

Likely real
Uncertain, 48% confidence

Use of weak SHA1 hash for security. Consider usedforsecurity=False
```
168     def __init__(self):
169         self._checksum = sha1()
170
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/vendored/six.py line 735

Likely real
Uncertain, 40% confidence

Use of exec detected.
```
734             _locs_ = _globs_
735         exec("""exec _code_ in _globs_, _locs_""")
736
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/six.py line 740

Likely real
Uncertain, 40% confidence

Use of exec detected.
```
739             _locs_ = _globs_
740         exec("""exec _code_ in _globs_, _locs_""")
741
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 1426

Likely real
Yes, 95% confidence

Possible hardcoded password: 'aws_secret_access_key'
```
1425     ACCESS_KEY = 'aws_access_key_id'
1426     SECRET_KEY = 'aws_secret_access_key'
1427     # Same deal as the EnvProvider above.  Botocore originally supported
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 1368

Likely real
Yes, 95% confidence

Possible hardcoded password: 'aws_secret_access_key'
```
1367     ACCESS_KEY = 'aws_access_key_id'
1368     SECRET_KEY = 'aws_secret_access_key'
1369     # Same deal as the EnvProvider above.  Botocore originally supported
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 2074

Likely real
Yes, 95% confidence

Possible hardcoded password: 'AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE'
```
2073     ENV_VAR_AUTH_TOKEN = 'AWS_CONTAINER_AUTHORIZATION_TOKEN'
2074     ENV_VAR_AUTH_TOKEN_FILE = 'AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE'
2075
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/jmespath/parser.py line 240

Likely real
Yes, 95% confidence

Possible hardcoded password: 'number'
```
239                 self._advance()
240             elif current_token == 'number':
241                 parts[index] = self._lookahead_token(0)['value']
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/jmespath/parser.py line 234

Likely real
Yes, 95% confidence

Possible hardcoded password: 'colon'
```
233         while not current_token == 'rbracket' and index < 3:
234             if current_token == 'colon':
235                 index += 1
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/jmespath/parser.py line 233

Likely real
Yes, 95% confidence

Possible hardcoded password: 'rbracket'
```
232         current_token = self._current_token()
233         while not current_token == 'rbracket' and index < 3:
234             if current_token == 'colon':
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/utils.py line 398

Likely real
Yes, 95% confidence

Possible hardcoded password: '21600'
```
397     _TOKEN_PATH = 'latest/api/token'
398     _TOKEN_TTL = '21600'
399
```

Engine: Bandit · Python security linter
Counts towards: Vulnerability
File: /internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/useragent.py line 83
Likely real: Yes, 95% confidence

Possible hardcoded password: 'h'

82     'CREDENTIALS_ENV_VARS': 'g',
83     'CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN': 'h',
84     'CREDENTIALS_STS_ASSUME_ROLE': 'i',
85     'CREDENTIALS_STS_ASSUME_ROLE_WEB_ID': 'k',
86     'CREDENTIALS_PROFILE': 'n',
87     'CREDENTIALS_PROFILE_SOURCE_PROFILE': 'o',
88     'CREDENTIALS_PROFILE_NAMED_PROVIDER': 'p',
89     'CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN': 'q',
90     'CREDENTIALS_PROFILE_SSO': 'r',
91     'CREDENTIALS_SSO': 's',
92     'CREDENTIALS_PROFILE_SSO_LEGACY': 't',
93     'CREDENTIALS_SSO_LEGACY': 'u',
94     'CREDENTIALS_PROFILE_PROCESS': 'v',
95     'CREDENTIALS_PROCESS': 'w',
96     'CREDENTIALS_BOTO2_CONFIG_FILE': 'x',
97     'CREDENTIALS_HTTP': 'z',
98     'CREDENTIALS_IMDS': '0',
99     'BEARER_SERVICE_ENV_VARS': '3',
100     'CLI_V1_TO_V2_MIGRATION_DEBUG_MODE': '-',
101     'CREDENTIALS_PROFILE_LOGIN': 'AC',
102     'CREDENTIALS_LOGIN': 'AD',
103     'FLEXIBLE_CHECKSUMS_REQ_MD5': 'AE',
104     'FLEXIBLE_CHECKSUMS_REQ_SHA512': 'AF',
105     'FLEXIBLE_CHECKSUMS_REQ_XXHASH3': 'AG',
106     'FLEXIBLE_CHECKSUMS_REQ_XXHASH64': 'AH',
107     'FLEXIBLE_CHECKSUMS_REQ_XXHASH128': 'AI',
108 }
109 
110 
111 def register_feature_id(feature_id):
112     """Adds metric value to the current context object's ``features`` set.
113 
114     :type feature_id: str
115     :param feature_id: The name of the feature to register. Value must be a key
116         in the ``_USERAGENT_FEATURE_MAPPINGS`` dict.
117     """
118     ctx = get_context()
119     if ctx is None:
120         # Never register features outside the scope of a
121         # ``botocore.context.start_as_current_context`` context manager.
122         # Otherwise, the context variable won't be reset and features will
123         # bleed into all subsequent requests. Return instead of raising an
124         # exception since this function could be invoked in a public interface.
125         return
126     if val := _USERAGENT_FEATURE_MAPPINGS.get(feature_id):
127         ctx.features.add(val)
128 
129 
130 def register_feature_ids(feature_ids):
131     """Adds multiple feature IDs to the current context object's ``features`` set.
132 
133     :type feature_ids: iterable of str
134     :param feature_ids: An iterable of feature ID strings to register. Each
135         value must be a key in the ``_USERAGENT_FEATURE_MAPPINGS`` dict.

Engine: Bandit · Python security linter
Counts towards: Vulnerability
File: /internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/useragent.py line 89
Likely real: Yes, 95% confidence

Possible hardcoded password: 'q'

88     'CREDENTIALS_PROFILE_NAMED_PROVIDER': 'p',
89     'CREDENTIALS_PROFILE_STS_WEB_ID_TOKEN': 'q',
90     'CREDENTIALS_PROFILE_SSO': 'r',
91     'CREDENTIALS_SSO': 's',
92     'CREDENTIALS_PROFILE_SSO_LEGACY': 't',
93     'CREDENTIALS_SSO_LEGACY': 'u',
94     'CREDENTIALS_PROFILE_PROCESS': 'v',
95     'CREDENTIALS_PROCESS': 'w',
96     'CREDENTIALS_BOTO2_CONFIG_FILE': 'x',
97     'CREDENTIALS_HTTP': 'z',
98     'CREDENTIALS_IMDS': '0',
99     'BEARER_SERVICE_ENV_VARS': '3',
100     'CLI_V1_TO_V2_MIGRATION_DEBUG_MODE': '-',
101     'CREDENTIALS_PROFILE_LOGIN': 'AC',
102     'CREDENTIALS_LOGIN': 'AD',
103     'FLEXIBLE_CHECKSUMS_REQ_MD5': 'AE',
104     'FLEXIBLE_CHECKSUMS_REQ_SHA512': 'AF',
105     'FLEXIBLE_CHECKSUMS_REQ_XXHASH3': 'AG',
106     'FLEXIBLE_CHECKSUMS_REQ_XXHASH64': 'AH',
107     'FLEXIBLE_CHECKSUMS_REQ_XXHASH128': 'AI',
108 }
109 
110 
111 def register_feature_id(feature_id):
112     """Adds metric value to the current context object's ``features`` set.
113 
114     :type feature_id: str
115     :param feature_id: The name of the feature to register. Value must be a key
116         in the ``_USERAGENT_FEATURE_MAPPINGS`` dict.
117     """
118     ctx = get_context()
119     if ctx is None:
120         # Never register features outside the scope of a
121         # ``botocore.context.start_as_current_context`` context manager.
122         # Otherwise, the context variable won't be reset and features will
123         # bleed into all subsequent requests. Return instead of raising an
124         # exception since this function could be invoked in a public interface.
125         return
126     if val := _USERAGENT_FEATURE_MAPPINGS.get(feature_id):
127         ctx.features.add(val)
128 
129 
130 def register_feature_ids(feature_ids):
131     """Adds multiple feature IDs to the current context object's ``features`` set.
132 
133     :type feature_ids: iterable of str
134     :param feature_ids: An iterable of feature ID strings to register. Each
135         value must be a key in the ``_USERAGENT_FEATURE_MAPPINGS`` dict.
136     """
137     for feature_id in feature_ids:
138         register_feature_id(feature_id)
139 
140 
141 def sanitize_user_agent_string_component(raw_str, allow_hash):

Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 122

Likely real
Yes, 95% confidence

Possible hardcoded password: ' '
```
121                 elif self.isspace(nextchar):
122                     token = ' '
123                     break  # emit token
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 1496

Likely real
Yes, 95% confidence

Possible hardcoded password: 'aws_secret_access_key'
```
1495     ACCESS_KEY = 'aws_access_key_id'
1496     SECRET_KEY = 'aws_secret_access_key'
1497
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 1334

Likely real
Yes, 95% confidence

Possible hardcoded password: 'AWSSecretKey'
```
1333     ACCESS_KEY = 'AWSAccessKeyId'
1334     SECRET_KEY = 'AWSSecretKey'
1335
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 2073

Likely real
Yes, 95% confidence

Possible hardcoded password: 'AWS_CONTAINER_AUTHORIZATION_TOKEN'
```
2072     ENV_VAR_FULL = 'AWS_CONTAINER_CREDENTIALS_FULL_URI'
2073     ENV_VAR_AUTH_TOKEN = 'AWS_CONTAINER_AUTHORIZATION_TOKEN'
2074     ENV_VAR_AUTH_TOKEN_FILE = 'AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE'
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 1883

Likely real
Yes, 95% confidence

Possible hardcoded password: 'AWS_WEB_IDENTITY_TOKEN_FILE'
```
1882     _CONFIG_TO_ENV_VAR = {
1883         'web_identity_token_file': 'AWS_WEB_IDENTITY_TOKEN_FILE',
1884         'role_session_name': 'AWS_ROLE_SESSION_NAME',
1885         'role_arn': 'AWS_ROLE_ARN',
1886     }
1887 
1888     def __init__(
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 1189

Likely real
Yes, 94% confidence

Possible hardcoded password: 'AWS_SECRET_ACCESS_KEY'
```
1188     ACCESS_KEY = 'AWS_ACCESS_KEY_ID'
1189     SECRET_KEY = 'AWS_SECRET_ACCESS_KEY'
1190     # The token can come from either of these env var.
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/utils.py line 397

Likely real
Yes, 88% confidence

Possible hardcoded password: 'latest/api/token'
```
396     _RETRIES_EXCEEDED_ERROR_CLS = _RetriesExceededError
397     _TOKEN_PATH = 'latest/api/token'
398     _TOKEN_TTL = '21600'
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/serialize.py line 49

Likely real
Yes, 84% confidence

Using ElementTree to parse untrusted XML data is known to be vulnerable to XML attacks. Replace ElementTree with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
```
48 import struct
49 from xml.etree import ElementTree
50
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/compat.py line 87

Likely real
Yes, 52% confidence

Using xml.etree.ElementTree to parse untrusted XML data is known to be vulnerable to XML attacks. Replace xml.etree.ElementTree with the equivalent defusedxml package, or make sure defusedxml.defuse_stdlib() is called.
```
86 
87 import xml.etree.ElementTree as ETree
88 XMLParseError = ETree.ParseError
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/paginate.py line 389

Likely real
Uncertain, 45% confidence

Possible hardcoded password: 'None'
```
388         for name, token in next_token.items():
389             if (token is not None) and (token != 'None'):
390                 op_kwargs[name] = token
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/zoneinfo/rebuild.py line 6

Likely real
Probably noise, 14% confidence

Consider possible security implications associated with the subprocess module.
```
5 import json
6 from subprocess import check_call, check_output
7 from tarfile import TarFile
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/credentials.py line 20

Likely real
Probably noise, 12% confidence

Consider possible security implications associated with the subprocess module.
```
19 import os
20 import subprocess
21 import threading
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/zoneinfo/rebuild.py line 52

Likely real
Probably noise, 12% confidence

Starting a process with a partial executable path
```
51     try:
52         help_text = check_output(["zic", "--help"])
53     except OSError as e:
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/zoneinfo/rebuild.py line 62

Likely real
Probably noise, 4% confidence

subprocess call - check for execution of untrusted input.
```
61 
62     check_call(["zic"] + bloat_args + ["-d", zonedir] + filepaths)
63
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/zoneinfo/rebuild.py line 52

Likely real
Probably noise, 3% confidence

subprocess call - check for execution of untrusted input.
```
51     try:
52         help_text = check_output(["zic", "--help"])
53     except OSError as e:
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 1568

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
1567 
1568                     assert i == len_l or l[i] == ','
1569
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/httpchecksum.py line 657

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
656     # Validate this list isn't out of sync with _CRT_CHECKSUM_ALGORITHMS keys
657     assert all(
658         name in _CRT_CHECKSUM_ALGORITHMS for name in _CRT_CHECKSUM_CLS.keys()
659     )
660 _SUPPORTED_CHECKSUM_ALGORITHMS = list(_CHECKSUM_CLS.keys())
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/botocore/utils.py line 1279

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
1278         value_shape = shape.value
1279         assert key_shape.type_name == 'string'
1280         return OrderedDict(
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 367

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
366         # Function contract is that the year is always positive
367         assert year >= 0
368
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 465

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
464             key = [x for x in ['y', 'm', 'd'] if x not in strids]
465             assert len(missing) == len(key) == 1
466             key = key[0]
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 470

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
469 
470         assert len(self) == len(strids)  # otherwise this should not be called
471         out = {key: self[strids[key]] for key in strids}
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 1457

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
1456 
1457                 assert l[i] == ','
1458
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 1523

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
1522                         i += 1
1523                         assert l[i] in ('-', '.')
1524                         used_idxs.append(i)
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 1531

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
1530                         i += 1
1531                         assert l[i] in ('-', '.')
1532                         used_idxs.append(i)
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/response.py line 437

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
436         if not buffer:
437             assert self._size == 0
438             return b""
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/parser/_parser.py line 1572

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
1571 
1572                 assert i >= len_l
1573
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/dateutil/relativedelta.py line 369

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
368         if self.months:
369             assert 1 <= abs(self.months) <= 12
370             month += self.months
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/_collections.py line 335

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
334             # key/value pair
335             assert len(vals) >= 2
336             if combine:
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/http2/connection.py line 260

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
259 
260         assert status is not None
261         return HTTP2Response(
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/http2/probe.py line 45

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
44         except BaseException as e:  # Defensive:
45             assert not isinstance(e, KeyError)  # KeyError shouldn't be possible.
46             key_lock.release()
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/util/ssltransport.py line 160

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
159         else:
160             assert writing
161             buffer = io.BufferedWriter(raw, buffering)
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/util/ssltransport.py line 137

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
136         reading = "r" in mode or not writing
137         assert reading or writing
138         binary = "b" in mode
```
Engine
Bandit · Python security linter

Counts towards
Vulnerability

File
/internal/service/bedrockagentcore/test-fixtures/mcp_lambda_extracted/urllib3/response.py line 969

Likely real
Probably noise, 0% confidence

Use of assert detected. The enclosed code will be removed when compiling to optimised byte code.
```
968         """
969         assert self._fp
970         c_int_max = 2**31 - 1
```