Skip to content

Review comments

2340ee5
Select commit
Loading
Failed to load commit list.
Merged

Automate generation of switcher.json for Sphinx version dropdown and Introducing incremental documentation builds for dev productivity #68

Review comments
2340ee5
Select commit
Loading
Failed to load commit list.
Autodesk Chorus / security/bandit completed Mar 10, 2026 in 1s

17 issue(s) found

Summary of Issues

Type Count Severity Secure Coding Guidelines
B607: start_process_with_partial_path 8 LOW PYTH-INJC-30
B603: subprocess_without_shell_equals_true 8 LOW PYTH-INJC-30
B404: blacklist 1 LOW PYTH-INJC-30

How do I clear all these issues?

If you suspect these issues are not actual issues, click “Clear All Issues” above. Click here for more details.

Details and Annotations

Details

bandit version 1.7.9

Annotations

Check notice on line 459 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 459 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 484 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 484 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 504 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 504 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 510 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 510 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 518 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 518 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 530 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 530 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 888 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 888 in run.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.

Check notice on line 20 in scripts/generate_switcher.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B404: blacklist

Consider possible security implications associated with the subprocess module.
secure coding id: PYTH-INJC-30.

Check notice on line 42 in scripts/generate_switcher.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B607: start_process_with_partial_path

Starting a process with a partial executable path
secure coding id: PYTH-INJC-30.

Check notice on line 42 in scripts/generate_switcher.py

See this annotation in the file changed.

@autodesk-chorus autodesk-chorus / security/bandit

B603: subprocess_without_shell_equals_true

subprocess call - check for execution of untrusted input.
secure coding id: PYTH-INJC-30.