Squash upto cvat-ai/cvat@0900b52d (Release v2.4.5)

Co-authored-by: Boris Sekachev <[email protected]>
Co-authored-by: Boris Sekachev <[email protected]>
Co-authored-by: Dmitry Kruchinin <[email protected]>
Co-authored-by: Boris Sekachev <[email protected]>
Co-authored-by: Nikita Manovich <[email protected]>
Co-authored-by: zhiltsov-max <[email protected]>
Co-authored-by: Nikita Manovich <[email protected]>
Co-authored-by: Snyk bot <[email protected]>
Co-authored-by: Dmitry Kalinin <[email protected]>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Kruchinin <[email protected]>
Co-authored-by: Andrey Zhavoronkov <[email protected]>
Co-authored-by: Andrey Zhavoronkov <[email protected]>
Co-authored-by: Maxim Zhiltsov <[email protected]>
Co-authored-by: Roman Donchenko <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Maria Khrustaleva <[email protected]>
Co-authored-by: Andrey Zhavoronkov <[email protected]>
Co-authored-by: Nikita Manovich <[email protected]>
Co-authored-by: Timur Osmanov <[email protected]>
Co-authored-by: Maya <[email protected]>
Co-authored-by: Kirill Sizov <[email protected]>
Co-authored-by: TOsmanov <[email protected]>
Co-authored-by: Dmitriy Oparin <[email protected]>
Co-authored-by: Kirill Sizov <[email protected]>
Co-authored-by: Dmitry Kruchinin <[email protected]>
Co-authored-by: Anastasia Yasakova <[email protected]>
Co-authored-by: Kirill Lakhov <[email protected]>
Co-authored-by: Mariia Acoca <[email protected]>
Co-authored-by: Ben Hoff <[email protected]>
Co-authored-by: Kirill Lakhov <[email protected]>
Co-authored-by: snyk-bot <[email protected]>
Co-authored-by: Ben Hoff <[email protected]>
Co-authored-by: Boris Sekachev <[email protected]>
Co-authored-by: DmitriyOparin <[email protected]>
Co-authored-by: Dmitry Kalinin <[email protected]>
Co-authored-by: Kirill Sizov <[email protected]>
Co-authored-by: Kirill Lakhov <[email protected]>
Co-authored-by: Maxim Zhiltsov <[email protected]>
Co-authored-by: Dmitry Kruchinin <[email protected]>
Co-authored-by: Anastasia Yasakova <[email protected]>
Co-authored-by: PMazarovich <[email protected]>
Co-authored-by: kirill.sizov <[email protected]>
Co-authored-by: Andrey Zhavoronkov <[email protected]>
Co-authored-by: Artyom Zankevich <[email protected]>
Co-authored-by: DmitriySidnev <[email protected]>
Co-authored-by: Aleksey Alekseev <[email protected]>
Co-authored-by: Artem Filippov <[email protected]>
Co-authored-by: Kiwon Jung <[email protected]>
Co-authored-by: Nikita Manovich <[email protected]>
Co-authored-by: Vitaliy Nishukov <[email protected]>
Co-authored-by: manasars <[email protected]>
Co-authored-by: Artem Filippov <[email protected]>
Co-authored-by: Maksim Markelov <[email protected]>
Co-authored-by: Snyk bot <[email protected]>
Co-authored-by: amotovx <[email protected]>
Co-authored-by: MashaSS <[email protected]>
Co-authored-by: Roman Donchenko <[email protected]>
Co-authored-by: Chris <[email protected]>
Co-authored-by: Dmitry Agapov <[email protected]>
Co-authored-by: Dmitry Kalinin <[email protected]>
Co-authored-by: Jijoong Kim <[email protected]>
Co-authored-by: Johannes222 <[email protected]>
Co-authored-by: Mathis Chenuet <[email protected]>
Co-authored-by: Nico Galoppo <[email protected]>
Co-authored-by: Rodrigo Berriel <[email protected]>
Co-authored-by: Rush Tehrani <[email protected]>
Co-authored-by: Ryan Hirasaki <[email protected]>
Co-authored-by: Sebastian Yonekura <[email protected]>
Co-authored-by: Stella Alice Schlotter <[email protected]>
Co-authored-by: Vladimir Skubriev <[email protected]>
Co-authored-by: Zhiltsov Max <[email protected]>
Co-authored-by: a-andre <[email protected]>
Co-authored-by: telenachos <[email protected]>
Co-authored-by: timurx.osmanov <[email protected]>
Co-authored-by: Adam Teuscher <[email protected]>
Co-authored-by: Aleksandr Melnikov <[email protected]>
Co-authored-by: Ali Jahani <[email protected]>
Co-authored-by: Andrey Chernov <[email protected]>
Co-authored-by: André Aquilina <[email protected]>
Co-authored-by: Anna Petrovicheva <[email protected]>
Co-authored-by: Brandon Davis <[email protected]>
Co-authored-by: Evgeny Talanin <[email protected]>
Co-authored-by: Liron Ilouz <[email protected]>
Co-authored-by: Nikita Glazov <[email protected]>
Co-authored-by: OlgaP <[email protected]>
Co-authored-by: Priya4607 <[email protected]>
Co-authored-by: Seungwon Jeong <[email protected]>
Co-authored-by: T <[email protected]>
Co-authored-by: Varun Singh <[email protected]>
Co-authored-by: abdullahrkw <[email protected]>
Co-authored-by: syonekura <[email protected]>
Co-authored-by: vugia truong <[email protected]>
Co-authored-by: zliang7 <[email protected]>
Co-authored-by: Роман Донченко <[email protected]>
Co-authored-by: Adam Harvey <[email protected]>
Co-authored-by: Adam Hultman <[email protected]>
Co-authored-by: AetherBreeze <[email protected]>
Co-authored-by: Ajay Ramesh <[email protected]>
Co-authored-by: Akash Upadhyay <[email protected]>
Co-authored-by: Alex <[email protected]>
Co-authored-by: Alex Fomenko <[email protected]>
Co-authored-by: Alex Newman <[email protected]>
Co-authored-by: Alexander Ivkin <[email protected]>
Co-authored-by: Alexander Ivkin <[email protected]>
Co-authored-by: Ali Jahani <[email protected]>
Co-authored-by: Ali Jahani <[email protected]>
Co-authored-by: AmitN1212 <[email protected]>
Co-authored-by: Andrey Melnikov <[email protected]>
Co-authored-by: Anna Petrovicheva <[email protected]>
Co-authored-by: Anti <[email protected]>
Co-authored-by: Anugraha Sinha <[email protected]>
Co-authored-by: Artem <[email protected]>
Co-authored-by: Ashish Solanki <[email protected]>
Co-authored-by: Ashwin Ramesh <[email protected]>
Co-authored-by: AzaelCicero <[email protected]>
Co-authored-by: Bassel Mahmoud <[email protected]>
Co-authored-by: Boris Sekachev <>
Co-authored-by: Cheehan Weereratne <[email protected]>
Co-authored-by: Christian <[email protected]>
Co-authored-by: Codacy Badger <[email protected]>
Co-authored-by: DanVev <[email protected]>
Co-authored-by: Dhivya S <[email protected]>
Co-authored-by: Diego Cesar <[email protected]>
Co-authored-by: Dustin Dorroh <[email protected]>
Co-authored-by: Eduardo <[email protected]>
Co-authored-by: Eric Grinstein <[email protected]>
Co-authored-by: Eric Hofesmann <[email protected]>
Co-authored-by: Eric Jiang <[email protected]>
Co-authored-by: EvgenyShashkin <[email protected]>
Co-authored-by: Felix Obermaier <[email protected]>
Co-authored-by: Ferdinand Niedermann <[email protected]>
Co-authored-by: Flymax <[email protected]>
Co-authored-by: Frederic Tausch <[email protected]>
Co-authored-by: Freya Chen <[email protected]>
Co-authored-by: G Karthik Raja <[email protected]>
Co-authored-by: Gururaj Jeerge <[email protected]>
Co-authored-by: Happyzippy <[email protected]>
Co-authored-by: Hardik Dava <[email protected]>
Co-authored-by: Ilya Kochankov <[email protected]>
Co-authored-by: Irina Kovaleva <[email protected]>
Co-authored-by: Irrom <[email protected]>
Co-authored-by: JADG14 <[email protected]>
Co-authored-by: JK-97 <[email protected]>
Co-authored-by: Jacek Chrapkowski <[email protected]>
Co-authored-by: Jaesun Park <[email protected]>
Co-authored-by: Jan Hünnemeyer <[email protected]>
Co-authored-by: Jason Wu <[email protected]>
Co-authored-by: Josh Bradley <[email protected]>
Co-authored-by: Julian Guarin <[email protected]>
Co-authored-by: Julian Wagenschütz <[email protected]>
Co-authored-by: Kazuki Matsuda <[email protected]>
Co-authored-by: Kirill <[email protected]>
Co-authored-by: Kirill Plyashkevich <[email protected]>
Co-authored-by: Kirpichev Michael <[email protected]>
Co-authored-by: KoheiKanagu <[email protected]>
Co-authored-by: Krzysztof Begiedza <[email protected]>
Co-authored-by: Lei Lei <[email protected]>
Co-authored-by: Lisa <[email protected]>
Co-authored-by: Lokesh Ravindranathan <[email protected]>
Co-authored-by: LukeAI <[email protected]>
Co-authored-by: Marci <[email protected]>
Co-authored-by: MashaSS <[email protected]>
Co-authored-by: Max Wang <[email protected]>
Co-authored-by: Maxim Selyuk <[email protected]>
Co-authored-by: Maya <[email protected]>
Co-authored-by: Michael Fujarski <[email protected]>
Co-authored-by: Michael Selasi Dzamesi <[email protected]>
Co-authored-by: Mike Peven <[email protected]>
Co-authored-by: Mikhail Treskin <[email protected]>
Co-authored-by: Mingxin Zheng <[email protected]>
Co-authored-by: Mohammad Erfani <[email protected]>
Co-authored-by: Naval Chand <[email protected]>
Co-authored-by: Padraig X. Lamont <[email protected]>
Co-authored-by: Pratik Raj <[email protected]>
Co-authored-by: RGring <[email protected]>
Co-authored-by: RS Nikhil Krishna <[email protected]>
Co-authored-by: Radhika <[email protected]>
Co-authored-by: Rafael Kazuo Sato Simião <[email protected]>
Co-authored-by: Ram Balachandran <[email protected]>
Co-authored-by: Reza Malek <[email protected]>
Co-authored-by: Roberto Villalba <[email protected]>
Co-authored-by: Saif Khan <[email protected]>
Co-authored-by: Santosh Thoduka <[email protected]>
Co-authored-by: Satoshi Oikawa <[email protected]>
Co-authored-by: Saurabh Khanduja <[email protected]>
Co-authored-by: Saurabh Yadav <[email protected]>
Co-authored-by: Savan Visalpara <[email protected]>
Co-authored-by: Schlotter Benjamin <[email protected]>
Co-authored-by: Scotty Kwok <[email protected]>
Co-authored-by: Seongmoon Jeong <[email protected]>
Co-authored-by: Tadej Svetina <[email protected]>
Co-authored-by: Tanvi Anand <[email protected]>
Co-authored-by: Thatwho <[email protected]>
Co-authored-by: Thomas Albrecht <[email protected]>
Co-authored-by: Toni Kunic <[email protected]>
Co-authored-by: Tritin Truong <[email protected]>
Co-authored-by: Tritin Truong <[email protected]>
Co-authored-by: Utkarsh Goel <[email protected]>
Co-authored-by: Vincent Richard <[email protected]>
Co-authored-by: Vitaliy Nishukov <[email protected]>
Co-authored-by: Waqar Shahid Qureshi <[email protected]>
Co-authored-by: Wenfei Zhu <[email protected]>
Co-authored-by: William Schmitt <[email protected]>
Co-authored-by: Xiong Jie <[email protected]>
Co-authored-by: Yigit Ozen <[email protected]>
Co-authored-by: Young <[email protected]>
Co-authored-by: YutaYamazaki <[email protected]>
Co-authored-by: Zack Murry <[email protected]>
Co-authored-by: Zoya Maslova <[email protected]>
Co-authored-by: abaart <[email protected]>
Co-authored-by: aschernov <[email protected]>
Co-authored-by: azhavoro <[email protected]>
Co-authored-by: bseres99 <[email protected]>
Co-authored-by: ddx-day <[email protected]>
Co-authored-by: gudipudiramanakumar <[email protected]>
Co-authored-by: himalayanZephyr <[email protected]>
Co-authored-by: hustfyb <[email protected]>
Co-authored-by: idriss <[email protected]>
Co-authored-by: idriss <[email protected]>
Co-authored-by: inpv <[email protected]>
Co-authored-by: iwamoto keita <[email protected]>
Co-authored-by: jrjbertram <[email protected]>
Co-authored-by: kirill-sizov <[email protected]>
Co-authored-by: kshramt <[email protected]>
Co-authored-by: lizhming <[email protected]>
Co-authored-by: magician <[email protected]>
Co-authored-by: matthias-p <[email protected]>
Co-authored-by: mfurkancoskun <[email protected]>
Co-authored-by: ningjunwei2 <[email protected]>
Co-authored-by: provider161 <[email protected]>
Co-authored-by: qztseng <[email protected]>
Co-authored-by: ranko r sredojevic <[email protected]>
Co-authored-by: rhee-elten <[email protected]>
Co-authored-by: roho <[email protected]>
Co-authored-by: se-wo <[email protected]>
Co-authored-by: shaojun <[email protected]>
Co-authored-by: suzu <[email protected]>
Co-authored-by: tdowgiel <[email protected]>
Co-authored-by: vainkop <[email protected]>
Co-authored-by: vfdev <[email protected]>
Co-authored-by: wartek69 <[email protected]>
Co-authored-by: xuchen <[email protected]>
Co-authored-by: Роман Донченко <[email protected]>

.bandit

@@ -0,0 +1,9 @@
+[bandit]
+# B101 : assert_used
+# B102 : exec_used
+# B320 : xml_bad_etree
+# B404 : import_subprocess
+# B406 : import_xml_sax
+# B410 : import_lxml
+skips: B101,B102,B320,B404,B406,B410
+exclude: **/tests/**,tests

.codacy.yml

@@ -0,0 +1,5 @@
+exclude_paths:
+  - '**/3rdparty/**'
+  - '**/engine/js/cvat-core.min.js'
+  - '**/engine/js/unzip_imgs.js'
+  - CHANGELOG.md

.coveragerc

@@ -0,0 +1,39 @@
+[run]
+branch = true
+# relative_files = true # does not work?
+
+source =
+    cvat/apps/
+    cvat-sdk/
+    cvat-cli/
+    utils/dataset_manifest
+
+omit =
+    cvat/settings/*
+    */tests/*
+    */test_*
+    */_test_*
+    */migrations/*
+
+[report]
+# Regexes for lines to exclude from consideration
+exclude_lines =
+    # Have to re-enable the standard pragma
+    pragma: no cover
+
+    # Don't complain about missing debug-only code:
+    def __repr__
+    if\s+[\w\.()]+\.isEnabledFor\(log\.DEBUG\):
+
+    # Don't complain if tests don't hit defensive assertion code:
+    raise AssertionError
+    raise NotImplementedError
+
+    # Don't complain if non-runnable code isn't run:
+    if 0:
+    if __name__ == .__main__.:
+
+# don't fail on the code that can be found
+ignore_errors = true
+
+skip_empty = true

.dockerignore

@@ -0,0 +1,10 @@
+/.git
+/share
+/data
+/media
+/.env
+/.vscode
+/db.sqlite3
+/keys
+**/node_modules
+/static

.editorconfig

@@ -0,0 +1,17 @@
+# EditorConfig helps developers define and maintain consistent
+# coding styles between different editors and IDEs
+# editorconfig.org
+
+root = true
+
+[*]
+
+# Change these settings to your own preference
+indent_style = space
+indent_size = 4
+
+# We recommend you to keep these unchanged
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true

.eslintignore

@@ -0,0 +1,11 @@
+.*/
+3rdparty/
+node_modules/
+dist/
+data/
+datumaro/
+keys/
+logs/
+static/
+templates/
+*/webpack.config.js

.eslintrc.js

@@ -0,0 +1,73 @@
+// Copyright (C) 2018-2022 Intel Corporation
+//
+// SPDX-License-Identifier: MIT
+
+module.exports = {
+    root: true,
+    env: {
+        node: true,
+        browser: true,
+        es2020: true,
+    },
+    parserOptions: {
+        sourceType: 'module',
+        parser: '@typescript-eslint/parser',
+    },
+    ignorePatterns: [
+        '.eslintrc.js',
+        'lint-staged.config.js',
+        'site/themes/**',
+    ],
+    plugins: ['@typescript-eslint', 'security', 'no-unsanitized', 'import'],
+    extends: [
+        'eslint:recommended', 'plugin:security/recommended', 'plugin:no-unsanitized/DOM',
+        'airbnb-base', 'plugin:import/errors', 'plugin:import/warnings',
+        'plugin:import/typescript', 'plugin:@typescript-eslint/recommended', 'airbnb-typescript/base',
+    ],
+    rules: {
+        // 'header/header': [2, 'line', [{
+        //     pattern: ' {1}Copyright \\(C\\) (?:20\\d{2}-)?2022 Intel Corporation',
+        //     template: ' Copyright (C) 2022 Intel Corporation'
+        // }, '', ' SPDX-License-Identifier: MIT']],
+        'no-plusplus': 0,
+        'no-continue': 0,
+        'no-console': 0,
+        'no-param-reassign': ['error', { 'props': false }],
+        'no-restricted-syntax': [0, { selector: 'ForOfStatement' }],
+        'no-await-in-loop': 0,
+        'indent': ['error', 4, { 'SwitchCase': 1 }],
+        'max-len': ['error', { code: 120, ignoreStrings: true }],
+        'func-names': 0,
+        'valid-typeof': 0,
+        'no-useless-constructor': 0, // sometimes constructor is necessary to generate right documentation in cvat-core
+        'quotes': ['error', 'single', { "avoidEscape": true }],
+        'lines-between-class-members': 0,
+        'class-methods-use-this': 0,
+        'no-underscore-dangle': ['error', { allowAfterThis: true }],
+        'max-classes-per-file': 0,
+        'operator-linebreak': ['error', 'after'],
+        'newline-per-chained-call': 0,
+        'global-require': 0,
+        'arrow-parens': ['error', 'always'],
+        'security/detect-object-injection': 0, // the rule is relevant for user input data on the node.js environment
+        'import/order': ['error', {'groups': ['builtin', 'external', 'internal']}],
+        'import/prefer-default-export': 0, // works incorrect with interfaces
+
+        '@typescript-eslint/ban-ts-comment': 0,
+        '@typescript-eslint/no-explicit-any': 0,
+        '@typescript-eslint/indent': ['error', 4],
+        '@typescript-eslint/lines-between-class-members': 0,
+        '@typescript-eslint/explicit-function-return-type': ['warn', { allowExpressions: true }],
+        '@typescript-eslint/explicit-module-boundary-types': 'off',
+        '@typescript-eslint/ban-types': [
+            'error',
+            {
+                types: {
+                    '{}': false, // TODO: try to fix with Record<string, unknown>
+                    object: false, // TODO: try to fix with Record<string, unknown>
+                    Function: false, // TODO: try to fix somehow
+                },
+            },
+        ],
+    },
+};

.gitattributes

@@ -0,0 +1,29 @@
+*               text=auto whitespace=trailing-space,space-before-tab,-indent-with-non-tab,tab-in-indent,tabwidth=4
+
+.git*           text export-ignore
+
+*.txt           text
+*.htm           text
+*.html          text
+*.js            text
+*.py            text
+*.css           text
+*.md            text
+*.yml           text
+Dockerfile      text
+LICENSE         text
+*.conf          text
+*.mimetypes     text
+*.sh            text eol=lf
+
+*.avi           binary
+*.bmp           binary
+*.exr           binary
+*.ico           binary
+*.jpeg          binary
+*.jpg           binary
+*.png           binary
+*.gif           binary
+*.ttf           binary
+*.pdf           binary
+

.github/CODEOWNERS

@@ -0,0 +1,57 @@
+# https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners
+
+# These owners will be the default owners for everything in
+# the repo. Unless a later match takes precedence, they will
+# be requested for review when someone opens a pull request.
+*               @nmanovic
+
+# Order is important; the last matching pattern takes the most
+# precedence. When someone opens a pull request that only
+# modifies components below, only the list of owners and not
+# the global owner(s) will be requested for a review.
+
+# Component: Server
+/cvat/           @Marishka17
+
+# Component: CVAT SDK/CLI
+/cvat-sdk/       @SpecLad
+/cvat/schema.yml @SpecLad
+/cvat-cli/       @SpecLad
+
+# Component: Documentation
+/site/          @mdacoca
+/CHANGELOG.md   @mdacoca
+/README.md      @mdacoca
+
+# Component: CVAT UI
+/cvat-ui/       @bsekachev
+/cvat-data/     @azhavoro
+/cvat-canvas/   @bsekachev
+/cvat-canvas3d/ @bsekachev
+/cvat-core/     @bsekachev
+
+# Component: Datumaro
+/datumaro/      @zhiltsov-max
+/cvat/apps/dataset_manager/ @zhiltsov-max
+
+# Advanced components (e.g. analytics)
+/components/    @azhavoro
+
+# Component: Tests
+/tests/         @yasakova-anastasia
+
+# Component: Serverless functions
+/serverless/    @yasakova-anastasia
+
+# Infrastructure
+Dockerfile*     @azhavoro
+docker-compose* @azhavoro
+.*              @azhavoro
+*.conf          @azhavoro
+*.sh            @azhavoro
+/cvat_proxy/    @azhavoro
+/tests/         @azhavoro
+/utils/         @azhavoro
+/LICENSE        @nmanovic
+/.github/       @kirill-sizov
+/helm-chart/    @azhavoro

.github/ISSUE_TEMPLATE.md

@@ -0,0 +1,44 @@
+### My actions before raising this issue
+- [ ] Read/searched [the docs](https://github.com/cvat-ai/cvat/tree/master#documentation)
+- [ ] Searched [past issues](/issues)
+
+<!--- Provide a general summary of the issue in the Title above -->
+
+### Steps to Reproduce (for bugs)
+<!--- Provide a link to a live example or an unambiguous set of steps to
+reproduce this bug. Include code to reproduce, if relevant -->
+1.
+1.
+1.
+1.
+
+### Expected Behaviour
+<!--- If you're describing a bug, tell us what should happen. If you're
+suggesting a change/improvement, tell us how it should work -->
+
+### Current Behaviour
+<!--- If describing a bug, tell us what happens instead of the expected
+behavior. If suggesting a change/improvement, explain the difference from
+current behavior -->
+
+### Possible Solution
+<!--- Not obligatory, but suggest a fix/reason for the bug, or ideas on how
+to implement the addition or change -->
+
+### Context
+<!--- How has this issue affected you? What are you trying to accomplish?
+Providing context helps us come up with a solution that is most useful in
+the real world -->
+
+### Your Environment
+<!--- Include relevant details about the environment you experienced
+the bug in -->
+- Git hash commit (`git log -1`):
+- Docker version `docker version` (e.g. Docker 17.0.05):
+- Are you using Docker Swarm or Kubernetes?
+- Operating System and version (e.g. Linux, Windows, MacOS):
+- Code example or link to GitHub repo or gist to reproduce problem:
+- Other diagnostic information / logs:
+    <details>
+    <summary>Logs from `cvat` container</summary>
+    </details>

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,39 @@
+<!-- Raise an issue to propose your change (https://github.com/opencv/cvat/issues).
+It helps to avoid duplication of efforts from multiple independent contributors.
+Discuss your ideas with maintainers to be sure that changes will be approved and merged.
+Read the [Contribution guide](https://opencv.github.io/cvat/docs/contributing/). -->
+
+<!-- Provide a general summary of your changes in the Title above -->
+
+### Motivation and context
+<!-- Why is this change required? What problem does it solve? If it fixes an open
+issue, please link to the issue here. Describe your changes in detail, add
+screenshots. -->
+
+### How has this been tested?
+<!-- Please describe in detail how you tested your changes.
+Include details of your testing environment, and the tests you ran to
+see how your change affects other areas of the code, etc. -->
+
+### Checklist
+<!-- Go over all the following points, and put an `x` in all the boxes that apply.
+If an item isn't applicable for some reason, then ~~explicitly strikethrough~~ the whole
+line. If you don't do that, GitHub will show incorrect progress for the pull request.
+If you're unsure about any of these, don't hesitate to ask. We're here to help! -->
+- [ ] I submit my changes into the `develop` branch
+- [ ] I have added a description of my changes into the [CHANGELOG](https://github.com/opencv/cvat/blob/develop/CHANGELOG.md) file
+- [ ] I have updated the documentation accordingly
+- [ ] I have added tests to cover my changes
+- [ ] I have linked related issues (see [GitHub docs](
+  https://help.github.com/en/github/managing-your-work-on-github/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword))
+- [ ] I have increased versions of npm packages if it is necessary
+  ([cvat-canvas](https://github.com/opencv/cvat/tree/develop/cvat-canvas#versioning),
+  [cvat-core](https://github.com/opencv/cvat/tree/develop/cvat-core#versioning),
+  [cvat-data](https://github.com/opencv/cvat/tree/develop/cvat-data#versioning) and
+  [cvat-ui](https://github.com/opencv/cvat/tree/develop/cvat-ui#versioning))
+
+### License
+
+- [ ] I submit _my code changes_ under the same [MIT License](
+  https://github.com/opencv/cvat/blob/develop/LICENSE) that covers the project.
+  Feel free to contact the maintainers if that's a concern.

.github/workflows/bandit.yml

@@ -0,0 +1,41 @@
+name: Bandit
+on: pull_request
+jobs:
+  Linter:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - id: files
+        uses: tj-actions/[email protected]
+        with:
+          files: |
+            **/*.py
+          files_ignore: |
+            **/cvat-sdk/*
+
+      - name: Run checks
+        run: |
+          CHANGED_FILES="${{steps.files.outputs.all_changed_files}}"
+
+          if [[ ! -z $CHANGED_FILES ]]; then
+            sudo apt-get --no-install-recommends install -y build-essential curl python3-dev python3-pip python3-venv
+            python3 -m venv .env
+            . .env/bin/activate
+            pip install -U pip wheel setuptools
+            pip install bandit
+            mkdir -p bandit_report
+
+            echo "Bandit version: "$(bandit --version | head -1)
+            echo "The files will be checked: "$(echo $CHANGED_FILES)
+            bandit -a file --ini .bandit -f html -o ./bandit_report/bandit_checks.html $CHANGED_FILES
+            deactivate
+          else
+            echo "No files with the \"py\" extension found"
+          fi
+
+      - name: Upload artifacts
+        if: failure()
+        uses: actions/[email protected]
+        with:
+          name: bandit_report
+          path: bandit_report