subprocess call - check for execution of untrusted input.

Open

        proc = subprocess.run(
            [zstd_cmd, "-d"],
            input=ZSTD_AVOCADO,
            stdout=subprocess.PIPE,
            stderr=subprocess.PIPE,

• Exclude checks
  • Disable engine
  • Disable check

subprocess call - check for execution of untrusted input.

Open

    proc = subprocess.run(
        [zstd_cmd, "-d", path, "-o", output_path],
        stdout=subprocess.PIPE,
        stderr=subprocess.PIPE,
        check=False,

• Exclude checks
  • Disable engine
  • Disable check

Consider possible security implications associated with subprocess module.

Open

import subprocess

• Exclude checks
  • Disable engine
  • Disable check

File archive.py has 288 lines of code (exceeds 250 allowed). Consider refactoring.

Open

# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#

Function _update_zip_extra_attrs has a Cognitive Complexity of 18 (exceeds 5 allowed). Consider refactoring.

Open

    def _update_zip_extra_attrs(self, dst_dir):
        if platform.system() != "Linux":
            LOG.warning("Attr handling in zip files only supported on Linux.")
            return
        # Walk all files and re-create files as symlinks

• Read up
  Read up

Function compress has a Cognitive Complexity of 7 (exceeds 5 allowed). Consider refactoring.

Open

def compress(filename, path):
    """
    Compress files in an archive.

    :param filename: archive file name.

• Read up
  Read up

Function gzip_uncompress has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.

Open

def gzip_uncompress(path, output_path):
    """
    Uncompress a gzipped file at path, to either a file or dir at output_path
    """
    with gzip.GzipFile(filename=path, mode="rb") as input_file:

• Read up
  Read up