Pathfinder scanned this open-source repository. Scan your own repos free →
← Back to scan results
shivasurya/code-pathfinder

high Dangerous subprocess Usage

python-sdk/scripts/generate_sdk_manifest.py:372

subprocess call detected. Ensure arguments are not user-controlled.

CWE-78 open

Code

python-sdk/scripts/generate_sdk_manifest.py
369        for indexer_name in ("index_python_from_cdn.py", "index_go_from_cdn.py"):
370            indexer = SCRIPT_DIR / indexer_name
371            if indexer.exists():
372                result = subprocess.run([sys.executable, str(indexer)], check=False)
373                if result.returncode != 0:
374                    print(
375                        f"[warn] {indexer_name} returned non-zero — handcrafted manifest still written."

Dataflow

Source
python-sdk/scripts/generate_sdk_manifest.py:372
Sink
python-sdk/scripts/generate_sdk_manifest.py:372 subprocess.run

Seen on 8 scans

Get this for your repo.

Pathfinder runs the same scan on your own repos free. Connect via GitHub in 30 seconds.

Get started View the open-source rules →