Skip to content

Support for pytest-xdist #164

Support for pytest-xdist

Support for pytest-xdist #164

Triggered via pull request June 24, 2026 13:18
Status Success
Total duration 32s
Artifacts

semgrep.yaml

on: pull_request
semgrep/ci
25s
semgrep/ci
Fit to window
Zoom out
Zoom in

Annotations

7 errors and 1 warning
Semgrep Issue: tools/yolov7/yolov7_exporter.py#L32
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
Semgrep Issue: tools/yolov6r3/yolov6_r3_exporter.py#L40
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
Semgrep Issue: tools/yolov6r3/gold_yolo_exporter.py#L33
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
Semgrep Issue: tools/yolov6r1/yolov6_r1_exporter.py#L28
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
Semgrep Issue: tools/yolo/yolov6_exporter.py#L29
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
Semgrep Issue: tools/yolo/yolov5_exporter.py#L40
Functions reliant on pickle can result in arbitrary code execution. Consider loading from `state_dict`, using fickling, or switching to a safer serialization method like ONNX
Semgrep Issue: tools/version_detection/version_detection.py#L38
Possible path traversal through `tarfile.open($PATH).extractall()` if the source tar is controlled by an attacker
semgrep/ci
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/