Skip to content
This repository was archived by the owner on Jul 8, 2021. It is now read-only.

Resolved bento warnings #1

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Resolved bento warnings #1

wants to merge 1 commit into from

Conversation

linkous8
Copy link

Bento Output:

bandit try-except-pass https://bandit.readthedocs.io/en/latest/plugins/b110_try_except_pass.html
     > adjust:310                                                                     
     ╷                                                                                
  310│   except Exception as e:                                                       
     ╵                                                                                
     = Try, Except, Pass detected.

bandit subprocess-popen-with-shell-equals-true https://bandit.readthedocs.io/en/latest/plugins/b602_subprocess_popen_with_shell_equals_true.html
     > adjust:399
     ╷
  399│   res = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE,
  400│       shell=True, timeout=tout, executable='/bin/bash')
     ╵
     = subprocess call with shell=True identified, security issue.

bandit eval-used https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b307-eval
     > formula.py:46
     ╷
   46│   ret = eval(expr, get_gbl(), var)
     ╵
     = Use of possibly insecure function - consider using safer
       ast.literal_eval.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant