-
Notifications
You must be signed in to change notification settings - Fork 142
Conversation
This patch fixes some of the codacy warnings. warning fixed : "subprocess call with shell=True identified, security issue. Signed-off-by: Rinku Kothiya <rinku.kothiya@seagate.com>
retest this please |
1 similar comment
retest this please |
run sncr |
test sncr |
As mentioned in the ticket. There are 2 new codacy issues after fixing the 2 issues. The new warnings is, "subprocess call - check for execution of untrusted input". According to the below issue it seems that we need to manually ignore this if we think that the input is trusted : |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
codacy issue is marked as false positive.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me.
rerun sncr |
Since the two newly added pre-merge jobs are still in its initial stage, we have not made them mandatory merge requirement. |
This patch fixes some of the codacy warnings.
warning fixed : "subprocess call with shell=True identified, security
issue.
Signed-off-by: Rinku Kothiya rinku.kothiya@seagate.com
Problem Statement
issue."
Design
of low severity which needs to be manually verified and ignored. The reason of getting this new new warning is explained
in the pr.
Coding
Checklist for Author
Testing
Checklist for Author
Impact Analysis
Checklist for Author/Reviewer/GateKeeper
Review Checklist
Checklist for Author
Documentation
Checklist for Author