USC-CSSL
diff --git a/Diff for: ‎.bandit
+9 b/Diff for: ‎.bandit
+9
diff --git a/Diff for: ‎.codacy.yml
+5 b/Diff for: ‎.codacy.yml
+5
diff --git a/Diff for: ‎.coveragerc
+39 b/Diff for: ‎.coveragerc
+39
diff --git a/Diff for: ‎.dockerignore
+10 b/Diff for: ‎.dockerignore
+10
diff --git a/Diff for: ‎.editorconfig
+17 b/Diff for: ‎.editorconfig
+17
diff --git a/Diff for: ‎.eslintignore
+11 b/Diff for: ‎.eslintignore
+11
diff --git a/Diff for: ‎.eslintrc.js
+73 b/Diff for: ‎.eslintrc.js
+73
diff --git a/Diff for: ‎.gitattributes
+29 b/Diff for: ‎.gitattributes
+29
diff --git a/Diff for: ‎.github/CODEOWNERS
+57 b/Diff for: ‎.github/CODEOWNERS
+57
diff --git a/Diff for: ‎.github/ISSUE_TEMPLATE.md
+44 b/Diff for: ‎.github/ISSUE_TEMPLATE.md
+44
diff --git a/Diff for: ‎.github/PULL_REQUEST_TEMPLATE.md
+39 b/Diff for: ‎.github/PULL_REQUEST_TEMPLATE.md
+39
diff --git a/Diff for: ‎.github/workflows/bandit.yml
+41 b/Diff for: ‎.github/workflows/bandit.yml
+41
@@ -0,0 +1,9 @@
+[bandit]
+# B101 : assert_used
+# B102 : exec_used
+# B320 : xml_bad_etree
+# B404 : import_subprocess
+# B406 : import_xml_sax
+# B410 : import_lxml
+skips: B101,B102,B320,B404,B406,B410
+exclude: **/tests/**,tests
@@ -0,0 +1,5 @@
+exclude_paths:
+  - '**/3rdparty/**'
+  - '**/engine/js/cvat-core.min.js'
+  - '**/engine/js/unzip_imgs.js'
+  - CHANGELOG.md
@@ -0,0 +1,39 @@
+[run]
+branch = true
+# relative_files = true # does not work?
+
+source =
+    cvat/apps/
+    cvat-sdk/
+    cvat-cli/
+    utils/dataset_manifest
+
+omit =
+    cvat/settings/*
+    */tests/*
+    */test_*
+    */_test_*
+    */migrations/*
+
+[report]
+# Regexes for lines to exclude from consideration
+exclude_lines =
+    # Have to re-enable the standard pragma
+    pragma: no cover
+
+    # Don't complain about missing debug-only code:
+    def __repr__
+    if\s+[\w\.()]+\.isEnabledFor\(log\.DEBUG\):
+
+    # Don't complain if tests don't hit defensive assertion code:
+    raise AssertionError
+    raise NotImplementedError
+
+    # Don't complain if non-runnable code isn't run:
+    if 0:
+    if __name__ == .__main__.:
+
+# don't fail on the code that can be found
+ignore_errors = true
+
+skip_empty = true
@@ -0,0 +1,10 @@
+/.git
+/share
+/data
+/media
+/.env
+/.vscode
+/db.sqlite3
+/keys
+**/node_modules
+/static
@@ -0,0 +1,17 @@
+# EditorConfig helps developers define and maintain consistent
+# coding styles between different editors and IDEs
+# editorconfig.org
+
+root = true
+
+[*]
+
+# Change these settings to your own preference
+indent_style = space
+indent_size = 4
+
+# We recommend you to keep these unchanged
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
@@ -0,0 +1,11 @@
+.*/
+3rdparty/
+node_modules/
+dist/
+data/
+datumaro/
+keys/
+logs/
+static/
+templates/
+*/webpack.config.js
@@ -0,0 +1,73 @@
+// Copyright (C) 2018-2022 Intel Corporation
+//
+// SPDX-License-Identifier: MIT
+
+module.exports = {
+    root: true,
+    env: {
+        node: true,
+        browser: true,
+        es2020: true,
+    },
+    parserOptions: {
+        sourceType: 'module',
+        parser: '@typescript-eslint/parser',
+    },
+    ignorePatterns: [
+        '.eslintrc.js',
+        'lint-staged.config.js',
+        'site/themes/**',
+    ],
+    plugins: ['@typescript-eslint', 'security', 'no-unsanitized', 'import'],
+    extends: [
+        'eslint:recommended', 'plugin:security/recommended', 'plugin:no-unsanitized/DOM',
+        'airbnb-base', 'plugin:import/errors', 'plugin:import/warnings',
+        'plugin:import/typescript', 'plugin:@typescript-eslint/recommended', 'airbnb-typescript/base',
+    ],
+    rules: {
+        // 'header/header': [2, 'line', [{
+        //     pattern: ' {1}Copyright \\(C\\) (?:20\\d{2}-)?2022 Intel Corporation',
+        //     template: ' Copyright (C) 2022 Intel Corporation'
+        // }, '', ' SPDX-License-Identifier: MIT']],
+        'no-plusplus': 0,
+        'no-continue': 0,
+        'no-console': 0,
+        'no-param-reassign': ['error', { 'props': false }],
+        'no-restricted-syntax': [0, { selector: 'ForOfStatement' }],
+        'no-await-in-loop': 0,
+        'indent': ['error', 4, { 'SwitchCase': 1 }],
+        'max-len': ['error', { code: 120, ignoreStrings: true }],
+        'func-names': 0,
+        'valid-typeof': 0,
+        'no-useless-constructor': 0, // sometimes constructor is necessary to generate right documentation in cvat-core
+        'quotes': ['error', 'single', { "avoidEscape": true }],
+        'lines-between-class-members': 0,
+        'class-methods-use-this': 0,
+        'no-underscore-dangle': ['error', { allowAfterThis: true }],
+        'max-classes-per-file': 0,
+        'operator-linebreak': ['error', 'after'],
+        'newline-per-chained-call': 0,
+        'global-require': 0,
+        'arrow-parens': ['error', 'always'],
+        'security/detect-object-injection': 0, // the rule is relevant for user input data on the node.js environment
+        'import/order': ['error', {'groups': ['builtin', 'external', 'internal']}],
+        'import/prefer-default-export': 0, // works incorrect with interfaces
+
+        '@typescript-eslint/ban-ts-comment': 0,
+        '@typescript-eslint/no-explicit-any': 0,
+        '@typescript-eslint/indent': ['error', 4],
+        '@typescript-eslint/lines-between-class-members': 0,
+        '@typescript-eslint/explicit-function-return-type': ['warn', { allowExpressions: true }],
+        '@typescript-eslint/explicit-module-boundary-types': 'off',
+        '@typescript-eslint/ban-types': [
+            'error',
+            {
+                types: {
+                    '{}': false, // TODO: try to fix with Record<string, unknown>
+                    object: false, // TODO: try to fix with Record<string, unknown>
+                    Function: false, // TODO: try to fix somehow
+                },
+            },
+        ],
+    },
+};
@@ -0,0 +1,29 @@
+*               text=auto whitespace=trailing-space,space-before-tab,-indent-with-non-tab,tab-in-indent,tabwidth=4
+
+.git*           text export-ignore
+
+*.txt           text
+*.htm           text
+*.html          text
+*.js            text
+*.py            text
+*.css           text
+*.md            text
+*.yml           text
+Dockerfile      text
+LICENSE         text
+*.conf          text
+*.mimetypes     text
+*.sh            text eol=lf
+
+*.avi           binary
+*.bmp           binary
+*.exr           binary
+*.ico           binary
+*.jpeg          binary
+*.jpg           binary
+*.png           binary
+*.gif           binary
+*.ttf           binary
+*.pdf           binary
+
@@ -0,0 +1,57 @@
+# https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners
+
+# These owners will be the default owners for everything in
+# the repo. Unless a later match takes precedence, they will
+# be requested for review when someone opens a pull request.
+*               @nmanovic
+
+# Order is important; the last matching pattern takes the most
+# precedence. When someone opens a pull request that only
+# modifies components below, only the list of owners and not
+# the global owner(s) will be requested for a review.
+
+# Component: Server
+/cvat/           @Marishka17
+
+# Component: CVAT SDK/CLI
+/cvat-sdk/       @SpecLad
+/cvat/schema.yml @SpecLad
+/cvat-cli/       @SpecLad
+
+# Component: Documentation
+/site/          @mdacoca
+/CHANGELOG.md   @mdacoca
+/README.md      @mdacoca
+
+# Component: CVAT UI
+/cvat-ui/       @bsekachev
+/cvat-data/     @azhavoro
+/cvat-canvas/   @bsekachev
+/cvat-canvas3d/ @bsekachev
+/cvat-core/     @bsekachev
+
+# Component: Datumaro
+/datumaro/      @zhiltsov-max
+/cvat/apps/dataset_manager/ @zhiltsov-max
+
+# Advanced components (e.g. analytics)
+/components/    @azhavoro
+
+# Component: Tests
+/tests/         @yasakova-anastasia
+
+# Component: Serverless functions
+/serverless/    @yasakova-anastasia
+
+# Infrastructure
+Dockerfile*     @azhavoro
+docker-compose* @azhavoro
+.*              @azhavoro
+*.conf          @azhavoro
+*.sh            @azhavoro
+/cvat_proxy/    @azhavoro
+/tests/         @azhavoro
+/utils/         @azhavoro
+/LICENSE        @nmanovic
+/.github/       @kirill-sizov
+/helm-chart/    @azhavoro
@@ -0,0 +1,44 @@
+### My actions before raising this issue
+- [ ] Read/searched [the docs](https://github.com/cvat-ai/cvat/tree/master#documentation)
+- [ ] Searched [past issues](/issues)
+
+<!--- Provide a general summary of the issue in the Title above -->
+
+### Steps to Reproduce (for bugs)
+<!--- Provide a link to a live example or an unambiguous set of steps to
+reproduce this bug. Include code to reproduce, if relevant -->
+1.
+1.
+1.
+1.
+
+### Expected Behaviour
+<!--- If you're describing a bug, tell us what should happen. If you're
+suggesting a change/improvement, tell us how it should work -->
+
+### Current Behaviour
+<!--- If describing a bug, tell us what happens instead of the expected
+behavior. If suggesting a change/improvement, explain the difference from
+current behavior -->
+
+### Possible Solution
+<!--- Not obligatory, but suggest a fix/reason for the bug, or ideas on how
+to implement the addition or change -->
+
+### Context
+<!--- How has this issue affected you? What are you trying to accomplish?
+Providing context helps us come up with a solution that is most useful in
+the real world -->
+
+### Your Environment
+<!--- Include relevant details about the environment you experienced
+the bug in -->
+- Git hash commit (`git log -1`):
+- Docker version `docker version` (e.g. Docker 17.0.05):
+- Are you using Docker Swarm or Kubernetes?
+- Operating System and version (e.g. Linux, Windows, MacOS):
+- Code example or link to GitHub repo or gist to reproduce problem:
+- Other diagnostic information / logs:
+    <details>
+    <summary>Logs from `cvat` container</summary>
+    </details>
@@ -0,0 +1,39 @@
+<!-- Raise an issue to propose your change (https://github.com/opencv/cvat/issues).
+It helps to avoid duplication of efforts from multiple independent contributors.
+Discuss your ideas with maintainers to be sure that changes will be approved and merged.
+Read the [Contribution guide](https://opencv.github.io/cvat/docs/contributing/). -->
+
+<!-- Provide a general summary of your changes in the Title above -->
+
+### Motivation and context
+<!-- Why is this change required? What problem does it solve? If it fixes an open
+issue, please link to the issue here. Describe your changes in detail, add
+screenshots. -->
+
+### How has this been tested?
+<!-- Please describe in detail how you tested your changes.
+Include details of your testing environment, and the tests you ran to
+see how your change affects other areas of the code, etc. -->
+
+### Checklist
+<!-- Go over all the following points, and put an `x` in all the boxes that apply.
+If an item isn't applicable for some reason, then ~~explicitly strikethrough~~ the whole
+line. If you don't do that, GitHub will show incorrect progress for the pull request.
+If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
+- [ ] I submit my changes into the `develop` branch
+- [ ] I have added a description of my changes into the [CHANGELOG](https://github.com/opencv/cvat/blob/develop/CHANGELOG.md) file
+- [ ] I have updated the documentation accordingly
+- [ ] I have added tests to cover my changes
+- [ ] I have linked related issues (see [GitHub docs](
+  https://help.github.com/en/github/managing-your-work-on-github/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword))
+- [ ] I have increased versions of npm packages if it is necessary
+  ([cvat-canvas](https://github.com/opencv/cvat/tree/develop/cvat-canvas#versioning),
+  [cvat-core](https://github.com/opencv/cvat/tree/develop/cvat-core#versioning),
+  [cvat-data](https://github.com/opencv/cvat/tree/develop/cvat-data#versioning) and
+  [cvat-ui](https://github.com/opencv/cvat/tree/develop/cvat-ui#versioning))
+
+### License
+
+- [ ] I submit _my code changes_ under the same [MIT License](
+  https://github.com/opencv/cvat/blob/develop/LICENSE) that covers the project.
+  Feel free to contact the maintainers if that's a concern.
@@ -0,0 +1,41 @@
+name: Bandit
+on: pull_request
+jobs:
+  Linter:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - id: files
+        uses: tj-actions/[email protected]
+        with:
+          files: |
+            **/*.py
+          files_ignore: |
+            **/cvat-sdk/*
+
+      - name: Run checks
+        run: |
+          CHANGED_FILES="${{steps.files.outputs.all_changed_files}}"
+
+          if [[ ! -z $CHANGED_FILES ]]; then
+            sudo apt-get --no-install-recommends install -y build-essential curl python3-dev python3-pip python3-venv
+            python3 -m venv .env
+            . .env/bin/activate
+            pip install -U pip wheel setuptools
+            pip install bandit
+            mkdir -p bandit_report
+
+            echo "Bandit version: "$(bandit --version | head -1)
+            echo "The files will be checked: "$(echo $CHANGED_FILES)
+            bandit -a file --ini .bandit -f html -o ./bandit_report/bandit_checks.html $CHANGED_FILES
+            deactivate
+          else
+            echo "No files with the \"py\" extension found"
+          fi
+
+      - name: Upload artifacts
+        if: failure()
+        uses: actions/[email protected]
+        with:
+          name: bandit_report
+          path: bandit_report