Upgrade and Secure Temp File Creation

[pixeeai]

This codemod replaces all tempfile.mktemp calls to the more secure tempfile.mkstemp.

The Python tempfile documentation is explicit
that tempfile.mktemp should be deprecated to avoid an unsafe and unexpected race condition.
The changes from this codemod look like this:

  import tempfile
- tempfile.mktemp(...)
+ tempfile.mkstemp(...)

More reading

• https://docs.python.org/3/library/tempfile.html#tempfile.mktemp

Powered by: pixeebot (codemod ID: pixee:python/secure-tempfile)

[linux-foundation-easycla]

• ❌ - login: @pixeebot[bot] . The commit (ab1dd74) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please submit a support request ticket.

[kapilt]

Not clear who setup the bot, but its not going to able to sign the cla, and the relevant patch against unit test code so also not relevant from a runtime security consideration.

[kapilt]

Also this bot appears to suggesting a broken change, in that it’s not able to account for the return signature change, hence the changed test code fails to run. Closing as useless noise as a result.