-
Notifications
You must be signed in to change notification settings - Fork 142
CORTX-33346: Codacy Code cleanup #2032
Conversation
This patch fixes some of the codacy warnings. warning fixed : "subprocess call with shell=True identified, security issue. Signed-off-by: Rinku Kothiya <[email protected]>
|
retest this please |
1 similar comment
|
retest this please |
|
run sncr |
|
test sncr |
|
As mentioned in the ticket. There are 2 new codacy issues after fixing the 2 issues. The new warnings is, "subprocess call - check for execution of untrusted input". According to the below issue it seems that we need to manually ignore this if we think that the input is trusted : |
yeshpal-jain-seagate
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
codacy issue is marked as false positive.
yatin-mahajan
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good to me.
|
rerun sncr |
|
Since the two newly added pre-merge jobs are still in its initial stage, we have not made them mandatory merge requirement. |
This patch fixes some of the codacy warnings.
warning fixed : "subprocess call with shell=True identified, security
issue.
Signed-off-by: Rinku Kothiya [email protected]
Problem Statement
issue."
Design
of low severity which needs to be manually verified and ignored. The reason of getting this new new warning is explained
in the pr.
Coding
Checklist for Author
Testing
Checklist for Author
Impact Analysis
Checklist for Author/Reviewer/GateKeeper
Review Checklist
Checklist for Author
Documentation
Checklist for Author