Skip to content

Conversation

@marksarka
Copy link
Owner

No description provided.

@github-actions
Copy link

github-actions bot commented Nov 3, 2022

ShiftLeft LogoShiftLeft Logo

Summary

ShiftLeft NextGen Static Analysis detected 16 findings in this PR

Severity Count
Critical 8
Moderate 4
Info 0

Additionally there are 0 secrets leaked, and 4 vulnerabilities
inherited from OSS components.

Get more information about this scan.

Copy link

@jit-ci jit-ci bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Jit has detected 1 important finding in this PR that you should review.
The finding is detailed below as a comment.
It’s highly recommended that you fix this security issue before merge.

@@ -0,0 +1,2 @@
import subprocess
output = subprocess.check_output(f"nslookup2 {my_domain}", shell=True, encoding='UTF-8')
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Security control: Static Code Analysis Python

Type: Subprocess Popen With Shell Equals True

Description: subprocess call with shell=True identified, security issue.

Severity: HIGH

Learn more about this issue


Jit Bot commands and options (e.g., ignore issue)

You can trigger Jit actions by commenting on this PR review:

  • #jit_ignore_fp Ignore and mark this specific single instance of finding as “False Positive”
  • #jit_ignore_accept Ignore and mark this specific single instance of finding as “Accept Risk”
  • #jit_undo_ignore Undo ignore command

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants