From 8306137ef372748386e736c3672bd83dabcef9b8 Mon Sep 17 00:00:00 2001 From: GSRN Date: Tue, 16 Sep 2025 23:55:41 +0200 Subject: [PATCH] chore: Update host binding in service-adapters main.py ### Summary of Changes - Changed the host binding in `main.py` from `0.0.0.0` to `127.0.0.1` to restrict access to localhost, enhancing security by preventing external access. ### Expected Results - Improved security posture of the service-adapters module by limiting the network exposure of the application. --- services/service-adapters/bandit-report.json | 230 ------------------- services/service-adapters/main.py | 2 +- 2 files changed, 1 insertion(+), 231 deletions(-) delete mode 100644 services/service-adapters/bandit-report.json diff --git a/services/service-adapters/bandit-report.json b/services/service-adapters/bandit-report.json deleted file mode 100644 index c472156..0000000 --- a/services/service-adapters/bandit-report.json +++ /dev/null @@ -1,230 +0,0 @@ -{ - "errors": [], - "generated_at": "2025-09-12T15:43:08Z", - "metrics": { - ".\\main.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 1, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 1, - "SEVERITY.UNDEFINED": 0, - "loc": 28, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\main_old.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 1, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 1, - "SEVERITY.UNDEFINED": 0, - "loc": 368, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\models\\__init__.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 0, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\models\\schemas.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 51, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\routes\\__init__.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 0, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\routes\\events.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 59, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\routes\\frigate.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 58, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\routes\\general.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 42, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\routes\\home_assistant.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 66, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\routes\\immich.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 57, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\services\\__init__.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 0, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\services\\config.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 25, - "nosec": 0, - "skipped_tests": 0 - }, - ".\\services\\redis_client.py": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 0, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 0, - "SEVERITY.UNDEFINED": 0, - "loc": 7, - "nosec": 0, - "skipped_tests": 0 - }, - "_totals": { - "CONFIDENCE.HIGH": 0, - "CONFIDENCE.LOW": 0, - "CONFIDENCE.MEDIUM": 2, - "CONFIDENCE.UNDEFINED": 0, - "SEVERITY.HIGH": 0, - "SEVERITY.LOW": 0, - "SEVERITY.MEDIUM": 2, - "SEVERITY.UNDEFINED": 0, - "loc": 761, - "nosec": 0, - "skipped_tests": 0 - } - }, - "results": [ - { - "code": "37 \n38 uvicorn.run(app, host=\"0.0.0.0\", port=8000)\n", - "col_offset": 26, - "end_col_offset": 35, - "filename": ".\\main.py", - "issue_confidence": "MEDIUM", - "issue_cwe": { - "id": 605, - "link": "https://cwe.mitre.org/data/definitions/605.html" - }, - "issue_severity": "MEDIUM", - "issue_text": "Possible binding to all interfaces.", - "line_number": 38, - "line_range": [ - 38 - ], - "more_info": "https://bandit.readthedocs.io/en/1.8.6/plugins/b104_hardcoded_bind_all_interfaces.html", - "test_id": "B104", - "test_name": "hardcoded_bind_all_interfaces" - }, - { - "code": "454 \n455 uvicorn.run(app, host=\"0.0.0.0\", port=8000)\n", - "col_offset": 26, - "end_col_offset": 35, - "filename": ".\\main_old.py", - "issue_confidence": "MEDIUM", - "issue_cwe": { - "id": 605, - "link": "https://cwe.mitre.org/data/definitions/605.html" - }, - "issue_severity": "MEDIUM", - "issue_text": "Possible binding to all interfaces.", - "line_number": 455, - "line_range": [ - 455 - ], - "more_info": "https://bandit.readthedocs.io/en/1.8.6/plugins/b104_hardcoded_bind_all_interfaces.html", - "test_id": "B104", - "test_name": "hardcoded_bind_all_interfaces" - } - ] -} \ No newline at end of file diff --git a/services/service-adapters/main.py b/services/service-adapters/main.py index 946cd7b..a9dab04 100644 --- a/services/service-adapters/main.py +++ b/services/service-adapters/main.py @@ -35,4 +35,4 @@ app.include_router(events.router) if __name__ == "__main__": import uvicorn - uvicorn.run(app, host="0.0.0.0", port=8000) + uvicorn.run(app, host="127.0.0.1", port=8000)