Skip to content

chore(sec): added a handful of security checks#45462

Open
tarekziade wants to merge 1 commit into
mainfrom
tarekziade-sec
Open

chore(sec): added a handful of security checks#45462
tarekziade wants to merge 1 commit into
mainfrom
tarekziade-sec

Conversation

@tarekziade

Copy link
Copy Markdown
Collaborator

What does this PR do?

Activated some bandit rules and fixed a few spots

@tarekziade tarekziade requested review from paulinebm and ydshieh April 15, 2026 15:37
@github-actions

Copy link
Copy Markdown
Contributor

[For maintainers] Suggested jobs to run (before merge)

run-slow: auto, dia, ernie4_5, ernie4_5_vl_moe, hubert, sew, sew_d, videomt

@tarekziade

Copy link
Copy Markdown
Collaborator Author

run-slow: auto, dia, ernie4_5, ernie4_5_vl_moe, hubert, sew, sew_d, videomt

@github-actions

Copy link
Copy Markdown
Contributor

Workflow Run ⚙️

This comment contains run-slow, running the specified jobs:

models: ["models/auto", "models/dia", "models/ernie4_5", "models/ernie4_5_vl_moe", "models/hubert", "models/sew", "models/sew_d", "models/videomt"]
quantizations: []

@HuggingFaceDocBuilderDev

Copy link
Copy Markdown

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

@github-actions

Copy link
Copy Markdown
Contributor

CI Results

Workflow Run ⚙️

Commit Info

Context Commit Description
RUN 04ab8ddd workflow commit (merge commit)
PR d2815c19 branch commit (from PR)
main 18aa0866 base commit (on main)

✅ No failing test specific to this PR 🎉 👏 !

config.attention_dropout = fs_config.attention_dropout
config.conv_bias = False
conv_layers = eval(fs_config.extractor_conv_feature_layers)
conv_layers = ast.literal_eval(fs_config.extractor_conv_feature_layers)

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this would work, so ok

Comment on lines +550 to +552
self._tmp_dir = tempfile.mkdtemp(prefix="dia_test_")
self.audio_prompt_1_path = os.path.join(self._tmp_dir, "dia_test_sample_1.mp3")
self.audio_prompt_2_path = os.path.join(self._tmp_dir, "dia_test_sample_2.mp3")

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is integration test (decoreated @slow) - make sure we run this before merge, although the change is small and clear.

@ydshieh ydshieh left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks

@ydshieh

ydshieh commented May 18, 2026

Copy link
Copy Markdown
Collaborator

In general, we don't need to touch the conversion scripts. But it's fine to keep the changes as you already did.

@ydshieh

ydshieh commented Jun 11, 2026

Copy link
Copy Markdown
Collaborator

let's review this once the migration is done 👍 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants