From e0d441d12ad39a2f687a796646315567508fa06b Mon Sep 17 00:00:00 2001
From: umakarem82 <278497437+umakarem82@users.noreply.github.com>
Date: Wed, 6 May 2026 05:37:19 -0400
Subject: [PATCH] chore: annotate intentional bind-all interfaces check (Bandit
 B104)

---
 net_watch.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/net_watch.py b/net_watch.py
index b2d62f6..446a9d4 100644
--- a/net_watch.py
+++ b/net_watch.py
@@ -61,7 +61,7 @@ def classify(conn: Conn) -> list[str]:
         reasons.append("rdp")
     if conn.state in {"SYN-SENT", "SYN-RECV"}:
         reasons.append("handshake")
-    if remote.startswith("0.0.0.0") or remote.startswith("[::]"):
+    if remote.startswith("0.0.0.0") or remote.startswith("[::]"):  # nosec B104 (Intentional: watching all interfaces)
         reasons.append("unspecified-remote")
     return reasons