The Py package is being bundled with the test suite (a directory named site-packages/ndg/httpsclient/test). This is causing security failures when secret scanners detect the presence of localhost.key.
Expected behavior: The published code to pypi should not include the test folder. At a minimum, localhost.key should be stripped from the final released product to ensure it is not detected as a threat.
The Py package is being bundled with the test suite (a directory named
site-packages/ndg/httpsclient/test). This is causing security failures when secret scanners detect the presence oflocalhost.key.Expected behavior: The published code to pypi should not include the
testfolder. At a minimum, localhost.key should be stripped from the final released product to ensure it is not detected as a threat.