B606.md

Pattern: Starting a process with no shell

Issue: -

Description

This rule looks for the spawning of a subprocess in a way that doesn't use a shell. Although this is generally safe, it maybe useful for penetration testing work-flows to track where external system calls are used.

Further Reading

• The Python Standard Library - os.system
• The Python Standard Library - subprocess - Frequently Used Arguments
• Bandit - B606: start_process_with_no_shell