Address S113 @ oidc-exchange.py

pypa · May 16, 2024 · 411815e · 411815e
1 parent fa6d770
commit 411815e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/oidc-exchange.py b/oidc-exchange.py
@@ -209,7 +209,7 @@ def event_is_third_party_pr() -> bool:
 # Indices are expected to support `https://{domain}/_/oidc/audience`,
 # which tells OIDC exchange clients which audience to use.
 audience_url = f'https://{repository_domain}/_/oidc/audience'
-audience_resp = requests.get(audience_url)
+audience_resp = requests.get(audience_url, timeout=5)  # S113 wants a timeout
 assert_successful_audience_call(audience_resp, repository_domain)
 
 oidc_audience = audience_resp.json()['audience']
@@ -230,6 +230,7 @@ def event_is_third_party_pr() -> bool:
 mint_token_resp = requests.post(
     token_exchange_url,
     json={'token': oidc_token},
+    timeout=5,  # S113 wants a timeout
 )
 
 try: