Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: remove paramiko and use openssh binary #663

Closed
wants to merge 3 commits into from

Conversation

Xlin123
Copy link
Member

@Xlin123 Xlin123 commented Jan 4, 2024

- What I did
Removed paramiko which was used for reverse ssh in order to address this code scanning alert

- How I did it
Removed paramiko and used the binary.

- How to verify it
Use a sshnp command like the following
sshnp -f {atsign} -t {atsign} -h {host} -d {device} --legacy-daemon

- Description for the changelog
feat: remove paramiko and use openssh binary

@Xlin123
Copy link
Member Author

Xlin123 commented Jan 4, 2024

@cpswan @XavierChanth I'm not sure what best practices for versioning and removing paramiko from poetry / requirements.txt are. If you could give me some help there would be greatly appreciated.

@Xlin123 Xlin123 requested review from cpswan and XavierChanth January 4, 2024 20:44
@Xlin123 Xlin123 self-assigned this Jan 4, 2024
@cpswan cpswan marked this pull request as draft January 4, 2024 22:52
@cpswan
Copy link
Member

cpswan commented Jan 4, 2024

I've set this to draft as I think we should have an arch discussion before pushing ahead with this. I'd like to better understand the pros and cons of removing python native capability in exchange for other dependencies.

@Xlin123 Xlin123 closed this Jan 9, 2024
@Xlin123
Copy link
Member Author

Xlin123 commented Jan 9, 2024

After discussion in arch, decided to opt for python native solution.

@Xlin123 Xlin123 deleted the xlin-sshnpdpy-paramikowarning branch January 9, 2024 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants