Skip to content
Bandit

Fix OS command injection in WinRweAccess via os.system → subprocess.run(shell=False) #85

Sign in to view logs

Fix OS command injection in WinRweAccess via os.system → subprocess.run(shell=False)

Fix OS command injection in WinRweAccess via os.system → subprocess.run(shell=False) #85

Re-run triggered October 7, 2026 05:55
@prakashb72prakashb72
#114
sys-xmlcli:PTK0009082
Status Success
Total duration 31s
Artifacts 1

bandit.yml

on: pull_request
bandit
26s
bandit
Fit to window
Zoom out
Zoom in

Annotations

1 error, 1 warning, and 1 notice
bandit
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
bandit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: github/codeql-action/upload-sarif@v2. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
bandit
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Artifacts

Produced during runtime
Name Size Digest
results.sarif
5.27 KB
sha256:377b92486c0b7df243c39383f6fcb9cfee61b8ba1fcab8beca9837b3cb2634be