Add safeguards for constant subprocess commands

[drdavella]

Overview

Prevent false positives when adding hardening for subprocess commands

Description

• We need to avoid hardening subprocess calls when the commands are hardcoded literals
• Fixes Do not apply sandbox-process-creation when arguments are literals #263

[clavedeluna]

1. It's a bit weird that the existing unit tests now have this "cmd" which isn't defined in the code snippet of the test. Do you think it makes sense to define it with an appropriate cmd value (argument passed from a func?)
2. If cmd as a func arg isn't a good simple case for ^, could you add a test case for def func(cmd): subprocess.run(cmd....

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud