[GRASS-git] [OSGeo/grass] edb770: packaging: Use subprocess instead of os.popen for ...

Maryam Abkar noreply at github.com
Thu Mar 21 13:32:58 PDT 2024


  Branch: refs/heads/main
  Home:   https://github.com/OSGeo/grass
  Commit: edb7703703d8bf7a1303c8120fcd42ac7d126ffa
      https://github.com/OSGeo/grass/commit/edb7703703d8bf7a1303c8120fcd42ac7d126ffa
  Author: Maryam Abkar <42349380+naidneelttil at users.noreply.github.com>
  Date:   2024-03-21 (Thu, 21 Mar 2024)

  Changed paths:
    M utils/gitlog2changelog.py

  Log Message:
  -----------
  packaging: Use subprocess instead of os.popen for change log creation (#3469)

This addresses a warning from Bandit about an injection attack risk by using subprocess.Popen instead of os.popen.

---------

Co-authored-by: kpolchow <polchow.kira at gmail.com>



To unsubscribe from these emails, change your notification settings at https://github.com/OSGeo/grass/settings/notifications


More information about the grass-commit mailing list