-
Notifications
You must be signed in to change notification settings - Fork 21
Open
Description
The Py package is being bundled with the test suite (a directory named site-packages/ndg/httpsclient/test). This is causing security failures when secret scanners detect the presence of localhost.key.
Expected behavior: The published code to pypi should not include the test folder. At a minimum, localhost.key should be stripped from the final released product to ensure it is not detected as a threat.
Metadata
Metadata
Assignees
Labels
No labels