私はsubprocess
を使ってPython内からbandit
を実行しようとしています。私はこのようないくつかのコードを持っている:Python3のCalledProcessErrorの後のサブプロセス出力
import subprocess
command = ['bandit', '-r', 'goodcode']
output = subprocess.check_output(command)
print(output.decode())
これは正常に動作し、私にこのような文字列を出力できます:
Run started:2016-09-27 10:37:17.567678
Test results:
No issues identified.
Code scanned:
Total lines of code: 940
Total lines skipped (#nosec): 0
Run metrics:
Total issues (by severity):
Undefined: 0
Low: 0
Medium: 0
High: 0
Total issues (by confidence):
Undefined: 0
Low: 0
Medium: 0
High: 0
Files skipped (0):
...しかし、私はディレクトリ上でそれを実行するとbandit
をいくつかのエラーを返し、bandit
プロセス自体が、私はそうのようなCalledProcessError
をキャッチする必要がありますので1を返します。
import subprocess
command = ['bandit', '-r', 'badcode']
try:
output = subprocess.check_output(command)
except subprocess.CalledProcessError as e:
output = e.output
print(output.decode())
...私に次のような結果与える:
b"Run started:2016-09-27 10:42:26.616123\n\nTest results:\n>> Issue: [B110:try_except_pass] Try, Except, Pass detected.\n Severity: Low Confidence: High\n Location: badcode/conf/settings_development.py:93\n92\t from .settings_local import *\n93\texcept:\n94\t pass\n\n--------------------------------------------------\n>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'password'\n Severity: Low Confidence: Medium\n Location: badcode/frontend/tests/test_views.py:21\n20\t form['username'] = self.user.username\n21\t form['password'] = 'password'\n22\t\n\n--------------------------------------------------\n>> Issue: [B105:hardcoded_password_string] Possible hardcoded password: 'password'\n Severity: Low Confidence: Medium\n Location: badcode/frontend/tests/test_views.py:35\n34\t form['username'] = self.user.username\n35\t form['password'] = 'password'\n36\t\n\n--------------------------------------------------\n>> Issue: [B110:try_except_pass] Try, Except, Pass detected.\n Severity: Low Confidence: High\n Location: badcode/reasons/views.py:234\n233\t nr = subject.number\n234\t except:\n235\t pass\n\n--------------------------------------------------\n>> Issue: [B110:try_except_pass] Try, Except, Pass detected.\n Severity: Low Confidence: High\n Location: badcode/reasons/views.py:277\n276\t nr = event.number\n277\t except:\n278\t pass\n\n--------------------------------------------------\n>> Issue: [B110:try_except_pass] Try, Except, Pass detected.\n Severity: Low Confidence: High\n Location: badcode/retention/migrations/0010_auto_20160527_1603.py:13\n12\t retention.save()\n13\t except:\n14\t pass\n\n--------------------------------------------------\n>> Issue: [B110:try_except_pass] Try, Except, Pass detected.\n Severity: Low Confidence: High\n Location: badcode/retention/migrations/0015_auto_20160623_1051.py:13\n12\t retention.save()\n13\t except:\n14\t pass\n\n--------------------------------------------------\n>> Issue: [B108:hardcoded_tmp_directory] Probable insecure usage of temp file/directory.\n Severity: Medium Confidence: Medium\n Location: badcode/utils/views.py:322\n321\t css = '{}/static/badcode/css/screen.css'.format(settings.ROOT_DIR)\n322\t location = '/tmp/{}.pdf'.format(filename)\n323\t\n\n--------------------------------------------------\n\nCode scanned:\n\tTotal lines of code: 15287\n\tTotal lines skipped (#nosec): 0\n\nRun metrics:\n\tTotal issues (by severity):\n\t\tUndefined: 0.0\n\t\tLow: 7.0\n\t\tMedium: 1.0\n\t\tHigh: 0.0\n\tTotal issues (by confidence):\n\t\tUndefined: 0.0\n\t\tLow: 0.0\n\t\tMedium: 3.0\n\t\tHigh: 5.0\nFiles skipped (0):\n"
b""
は文字列内であることに留意されたいので、output[0] == 'b'
とoutput[1] == '"'
。どうしてこれなの?プロセスが0を返した場合、e.output
はoutput
と同じ出力をエンコードしてはなりませんか?