random module used for a security-sensitive value

What it detects

random module used for a security-sensitive value: a secrets check run by the semgrep analyzer.

Evidence

The Semgrep source location, rule identity, and bounded match context normalized into Fendix evidence.

Remediation

random module used inside a function whose name suggests a security-sensitive value. The `random` module is NOT cryptographically secure. Use `secrets.token_urlsafe()`, `secrets.token_bytes()`, or `secrets.choice()` instead.

Limitations

This check is limited to the applicability and evidence delivered by semgrep. Review the evidence in context; a match is a finding input, while confidence and policy determine its disposition.

Related reference

Analyzer Registry · Findings and release decisions · Policy and confidence

Remediation guidance: Remediation and fix verification · Baselines and suppressions