🛡️ Sentinel: [MEDIUM] Replace random with secrets for secure generation

agent.py

@@ -1,4 +1,4 @@
-import asyncio, random, string, threading
+import asyncio, secrets, string, threading
 
 from collections import OrderedDict
 from dataclasses import dataclass, field
@@ -135,7 +135,7 @@ def all():
     @staticmethod
     def generate_id():
         def generate_short_id():
-            return "".join(random.choices(string.ascii_letters + string.digits, k=8))
+            return "".join(secrets.choice(string.ascii_letters + string.digits) for _ in range(8))
 
         while True:
             short_id = generate_short_id()

helpers/guids.py

@@ -1,4 +1,4 @@
-import random, string
+import secrets, string
 
 def generate_id(length: int = 8) -> str:
-    return "".join(random.choices(string.ascii_letters + string.digits, k=length))
+    return "".join(secrets.choice(string.ascii_letters + string.digits) for _ in range(length))

prepare.py

@@ -1,6 +1,6 @@
 from helpers import dotenv, runtime, settings
 import string
-import random
+import secrets
 import sys
 from helpers.print_style import PrintStyle
 
@@ -33,7 +33,7 @@ def _retire_legacy_collabora_runtime() -> None:
     # generate random root password if not set (for SSH)
     root_pass = dotenv.get_dotenv_value(dotenv.KEY_ROOT_PASSWORD)
     if not root_pass:
-        root_pass = "".join(random.choices(string.ascii_letters + string.digits, k=32))
+        root_pass = "".join(secrets.choice(string.ascii_letters + string.digits) for _ in range(32))
         PrintStyle.standard("Changing root password...")
     settings.set_root_password(root_pass)