melexis/sphinx-traceability-extension

View on GitHub
doc/conf.py

Summary

Maintainability
A
0 mins
Test Coverage

subprocess call - check for execution of untrusted input.
Open

    plantuml_path = subprocess.check_output(["whereis", "-u", "plantuml"])
Severity: Info
Found in doc/conf.py by bandit

Starting a process with a partial executable path
Open

    plantuml_path = subprocess.check_output(["whereis", "-u", "plantuml"])
Severity: Info
Found in doc/conf.py by bandit

Starting a process with a partial executable path
Open

    plantuml_path = subprocess.check_output(["where", "/F", "plantuml.jar"])
Severity: Info
Found in doc/conf.py by bandit

subprocess call - check for execution of untrusted input.
Open

    plantuml_path = subprocess.check_output(["where", "/F", "plantuml.jar"])
Severity: Info
Found in doc/conf.py by bandit

Consider possible security implications associated with subprocess module.
Open

import subprocess
Severity: Info
Found in doc/conf.py by bandit

Remove this commented out code.
Open

# traceability_item_no_captions = True
Severity: Major
Found in doc/conf.py by sonar-python

Programmers should not comment out code as it bloats programs and reduces readability.

Unused code should be deleted and can be retrieved from source control history if required.

See

  • MISRA C:2004, 2.4 - Sections of code should not be "commented out".
  • MISRA C++:2008, 2-7-2 - Sections of code shall not be "commented out" using C-style comments.
  • MISRA C++:2008, 2-7-3 - Sections of code should not be "commented out" using C++ comments.
  • MISRA C:2012, Dir. 4.4 - Sections of code should not be "commented out"

There are no issues that match your filters.

Category
Status