We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Wheeltamer reported the following high severity issues:
Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue. Severity: High Confidence: High CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html) More Info: https://bandit.readthedocs.io/en/1.7.10/plugins/b602_subprocess_popen_with_shell_equals_true.html Location: WHEEL_UNPACKED_DIR/holoscan_cli-0.0.0a0.dev22+vchangtestpypi.4dd8512/holoscan_cli/common/dockerutils.py:524:11 523 ["nvidia-smi --query-gpu name --format=csv,noheader | grep nvgpu -q"], 524 shell=True, 525 ) 526 result = proc.returncode 527 return result == 0
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue. Severity: High Confidence: High CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html) More Info: https://bandit.readthedocs.io/en/1.7.10/plugins/b602_subprocess_popen_with_shell_equals_true.html Location: WHEEL_UNPACKED_DIR/holoscan_cli-0.0.0a0.dev22+vchangtestpypi.4dd8512/holoscan_cli/common/utils.py:65:11 64 """ 65 proc = subprocess.Popen(cmd, universal_newlines=True, shell=True) 66 return proc.wait()
>> Issue: [B602:subprocess_popen_with_shell_equals_true] subprocess call with shell=True identified, security issue. Severity: High Confidence: High CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html) More Info: https://bandit.readthedocs.io/en/1.7.10/plugins/b602_subprocess_popen_with_shell_equals_true.html Location: WHEEL_UNPACKED_DIR/holoscan_cli-0.0.0a0.dev22+vchangtestpypi.4dd8512/holoscan_cli/common/utils.py:79:11 78 """ 79 proc = subprocess.run(cmd, capture_output=True, text=True, shell=True) 80 return proc.stdout
The text was updated successfully, but these errors were encountered:
gh-9 Fix Wheeltamer issues
6e03063
Signed-off-by: Victor Chang <[email protected]>
gh-9 Address CWE-78 reported by Wheeltamer
557227a
a9abff8
358fd05
3c0fb9f
gh-9 Address CWE-78 reported by Wheeltamer (#10)
1ab2512
mocsharp
No branches or pull requests
Wheeltamer reported the following high severity issues:
The text was updated successfully, but these errors were encountered: