release: v3.10.5 — fix noqa→nosec for Bandit/GHAS

v3.10.4 used ruff-syntax 'noqa: S###' which Bandit/GHAS ignores;
correct syntax is 'nosec B###'. Pure suppression-comment fix, no
behaviour change. Alerts #172-176 should auto-close on next scan.

Author: STARGA Inc

ANATOMY.md

@@ -5,8 +5,8 @@
 > Re-generate with: `anatomy .`
 
 **Project:** `mind-mem`
-**Files:** 740 | **Est. tokens:** ~1,513,607
-**Generated:** 2026-05-09 01:05 UTC
+**Files:** 740 | **Est. tokens:** ~1,513,647
+**Generated:** 2026-05-09 01:07 UTC
 
 ## Token Budget Guide
 
@@ -56,7 +56,7 @@
 | `skills/integrity-scan/` | 1 | ~376 |
 | `skills/memory-recall/` | 1 | ~549 |
 | `src/` | 1 | ~280 |
-| `src/mind_mem/` | 155 | ~538,290 |
+| `src/mind_mem/` | 155 | ~538,330 |
 | `src/mind_mem/api/` | 5 | ~15,751 |
 | `src/mind_mem/mcp/` | 3 | ~3,960 |
 | `src/mind_mem/mcp/infra/` | 8 | ~6,924 |
@@ -529,7 +529,7 @@
 - `mind_ffi.py` (~5481 tok, huge) — mind-mem FFI bridge — loads compiled MIND .so and exposes scoring functions.
 - `mind_filelock.py` (~1844 tok, huge) — mind-mem file locking — cross-platform advisory locks. Zero external deps.
 - `mind_kernels.py` (~1706 tok, huge) — # Copyright 2026 STARGA, Inc.
-- `mm_cli.py` (~20001 tok, huge) — # Copyright 2026 STARGA, Inc.
+- `mm_cli.py` (~20041 tok, huge) — # Copyright 2026 STARGA, Inc.
 - `model_audit.py` (~4370 tok, huge) — Model checkpoint audit — scan for remote-code hooks, unsafe pickle, tokenizer injection.
 - `model_gate.py` (~2549 tok, huge) — Load-gate registry for ``mm audit-model`` checkpoints.
 - `model_provenance.py` (~1751 tok, huge) — Provenance allowlist check for ``mm audit-model`` checkpoints.

CHANGELOG.md

@@ -2,6 +2,22 @@
 
 All notable changes to MIND-Mem are documented in this file.
 
+## v3.10.5 — fix `# noqa` → `# nosec` for Bandit/GHAS
+
+Released 2026-05-08. The hardening landed in v3.10.4 was correct
+defensively but the suppression comments used ruff syntax (`# noqa: S###`)
+which Bandit / GitHub Code Scanning ignore — they require `# nosec
+B###`. GHAS re-opened alerts #172-176 because the underlying issues
+were still flagged even though the validation was in place.
+
+### Fixed
+- All five `# noqa: S404/S310/S603` annotations in `mm_cli.py` →
+  `# nosec B404/B310/B603` (the syntax Bandit honors).
+- No code-behaviour change. Validation, URL parsing, absolute-path
+  resolution, and input regex from v3.10.4 all stay.
+
+GHAS scan after v3.10.5 lands should auto-close #172-176.
+
 ## v3.10.4 — `mm install-model` security hardening (GHAS alerts #165-171)
 
 Released 2026-05-08. Closes 7 Bandit alerts on the new `install-model`

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mind-mem"
-version = "3.10.4"
+version = "3.10.5"
 description = "Drop-in memory for Claude Code, OpenClaw, and any MCP-compatible agent."
 readme = "README.md"
 license = { text = "Apache-2.0" }

src/mind_mem/__init__.py

@@ -43,7 +43,7 @@
 )
 from .storage import get_block_store
 
-__version__ = "3.10.4"
+__version__ = "3.10.5"
 
 # Best-effort import-time integrity check. Fails open unless
 # MIND_MEM_INTEGRITY=strict, so editable installs and source checkouts

src/mind_mem/mm_cli.py

@@ -383,7 +383,7 @@ def _cmd_install_model(args: argparse.Namespace) -> int:
     """
     import shutil
     import re
-    import subprocess  # noqa: S404 — used with absolute paths from shutil.which + list args, never shell=True
+    import subprocess  # nosec B404 — used with absolute paths from shutil.which + list args, never shell=True
     import urllib.parse
     import urllib.request
 
@@ -450,7 +450,7 @@ def _cmd_install_model(args: argparse.Namespace) -> int:
     expected_size = None
     req = urllib.request.Request(gguf_url, method="HEAD")
     try:
-        with urllib.request.urlopen(req, timeout=30) as resp:  # noqa: S310 — URL validated above
+        with urllib.request.urlopen(req, timeout=30) as resp:  # nosec B310 — URL is parse-validated above (https + huggingface.co only)
             expected_size = int(resp.headers.get("Content-Length") or 0)
     except Exception as exc:
         output["error"] = f"could not query HF for {args.model}: {exc}"
@@ -463,7 +463,7 @@ def _cmd_install_model(args: argparse.Namespace) -> int:
     else:
         try:
             req = urllib.request.Request(gguf_url)
-            with urllib.request.urlopen(req, timeout=600) as resp, open(dest, "wb") as fh:  # noqa: S310 — URL validated above
+            with urllib.request.urlopen(req, timeout=600) as resp, open(dest, "wb") as fh:  # nosec B310 — URL is parse-validated above (https + huggingface.co only)
                 while chunk := resp.read(8 * 1024 * 1024):
                     fh.write(chunk)
             output["downloaded"] = True
@@ -495,7 +495,7 @@ def _cmd_install_model(args: argparse.Namespace) -> int:
         print(json.dumps(output, indent=2))
         return 2
     try:
-        result = subprocess.run(  # noqa: S603 — argv list, no shell, validated args
+        result = subprocess.run(  # nosec B603 B607 — argv list w/ absolute path from shutil.which, no shell, validated args
             [ollama_bin, "create", args.name, "-f", modelfile],
             capture_output=True,
             text=True,
@@ -515,7 +515,7 @@ def _cmd_install_model(args: argparse.Namespace) -> int:
     # 5. Smoke test (warm the model + keep-alive). Same safety profile
     # as step 4: absolute path + argv list + validated args, no shell.
     try:
-        smoke = subprocess.run(  # noqa: S603 — argv list, no shell, validated args
+        smoke = subprocess.run(  # nosec B603 B607 — argv list w/ absolute path from shutil.which, no shell, validated args
             [ollama_bin, "run", args.name, "test"],
             input="hi\n",
             capture_output=True,