avocado-framework/avocado

Probable insecure usage of temp file/directory.

Open

        mounted_status_server_socket = "/tmp/.status_server.sock"

• Exclude checks
  • Disable engine
  • Disable check

Probable insecure usage of temp file/directory.

Open

                        runtime_task.task.runnable.uri = os.path.join(
                            "/tmp", runtime_task.task.runnable.uri

• Exclude checks
  • Disable engine
  • Disable check

Probable insecure usage of temp file/directory.

Open

                        to = os.path.join("/tmp", asset)

• Exclude checks
  • Disable engine
  • Disable check

subprocess call - check for execution of untrusted input.

Open

        process = subprocess.Popen(
            cmd,
            stdin=subprocess.DEVNULL,
            stdout=subprocess.PIPE,
            stderr=subprocess.DEVNULL,

• Exclude checks
  • Disable engine
  • Disable check

Consider possible security implications associated with subprocess module.

Open

import subprocess

• Exclude checks
  • Disable engine
  • Disable check

subprocess call - check for execution of untrusted input.

Open

            process = subprocess.Popen(
                cmd,
                stdin=subprocess.DEVNULL,
                stdout=subprocess.PIPE,
                stderr=subprocess.DEVNULL,

• Exclude checks
  • Disable engine
  • Disable check

Probable insecure usage of temp file/directory.

Open

            to = os.path.join("/tmp/", os.path.basename(path))

• Exclude checks
  • Disable engine
  • Disable check

Probable insecure usage of temp file/directory.

Open

        output_podman_path = "/tmp/.avocado_task_output_dir"

• Exclude checks
  • Disable engine
  • Disable check

File podman.py has 437 lines of code (exceeds 250 allowed). Consider refactoring.

Open

import asyncio
import json
import logging
import os
import re