Skip to content

Conversation

@dphogan
Copy link
Contributor

@dphogan dphogan commented Apr 3, 2023

No description provided.

@github-actions
Copy link

github-actions bot commented Apr 3, 2023

Validation Issues Found (Python) 🐍

File: ai/datasets2.py
Line Number: 284
Statement(s):

            time.sleep(0.5) 

Rule:
time.sleep() call; did you mean to leave this in?

File: ai/metrics2.py
Line Number: 105
Statement(s):

    if method == 'interp': 

Rule:
This expression is always True: method == method or method != method. If testing for floating point NaN, use math.isnan(method), or cmath.isnan(method) if the number is complex.

File: ai/model.py
Line Number: 511
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True, bufsize=1) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 538
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True, bufsize=1) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 563
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True, bufsize=1) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 596
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 622
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 723
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 738
Statement(s):

        p = subprocess.Popen(cmd, stdout=subprocess.PIPE, shell=True) 

Rule:
Found 'subprocess' function 'Popen' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

File: ai/model.py
Line Number: 959
Statement(s):

    subprocess.check_output("cat %s %s > %s" % (ls_cat, ls_ga, ls), shell=True) 

Rule:
Found 'subprocess' function 'check_output' with 'shell=True'. This is dangerous because this call will spawn the command using a shell process. Doing so propagates current shell settings and variables, which makes it much easier for a malicious actor to execute commands. Use 'shell=False' instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant