Skip to content
This repository was archived by the owner on Jul 8, 2021. It is now read-only.

Resolved bento warnings#1

Open
linkous8 wants to merge 1 commit into
masterfrom
bento-fix
Open

Resolved bento warnings#1
linkous8 wants to merge 1 commit into
masterfrom
bento-fix

Conversation

@linkous8

Copy link
Copy Markdown

Bento Output:

bandit try-except-pass https://bandit.readthedocs.io/en/latest/plugins/b110_try_except_pass.html
     > adjust:310                                                                     
     ╷                                                                                
  310│   except Exception as e:                                                       
     ╵                                                                                
     = Try, Except, Pass detected.

bandit subprocess-popen-with-shell-equals-true https://bandit.readthedocs.io/en/latest/plugins/b602_subprocess_popen_with_shell_equals_true.html
     > adjust:399
     ╷
  399│   res = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
  400│       shell=True, timeout=tout, executable='/bin/bash')
     ╵
     = subprocess call with shell=True identified, security issue.

bandit eval-used https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b307-eval
     > formula.py:46
     ╷
   46│   ret = eval(expr, get_gbl(), var)
     ╵
     = Use of possibly insecure function - consider using safer
       ast.literal_eval.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant