6f67a3ac6a
Signed-off-by: maipbui <maibui@microsoft.com> Dependency: [https://github.com/sonic-net/sonic-buildimage/pull/12065](https://github.com/sonic-net/sonic-buildimage/pull/12065) #### Why I did it `shell=True` is dangerous because this call will spawn the command using a shell process `os` - not secure against maliciously constructed input and dangerous if used to evaluate dynamic content. #### How I did it `os` - use with `subprocess` Use `shell=False` with shell features - redirection: [https://stackoverflow.com/questions/4965159/how-to-redirect-output-with-subprocess-in-python/6482200#6482200?newreg=53afb91b3ebd47c5930be627fcdf2930](https://stackoverflow.com/questions/4965159/how-to-redirect-output-with-subprocess-in-python/6482200#6482200?newreg=53afb91b3ebd47c5930be627fcdf2930) - `|` operator: [https://docs.python.org/2/library/subprocess.html#replacing-shell-pipeline](https://docs.python.org/2/library/subprocess.html#replacing-shell-pipeline) |
||
|---|---|---|
| .. | ||
| barefoot | ||
| broadcom | ||
| cavium | ||
| centec | ||
| centec-arm64 | ||
| checkout | ||
| components | ||
| generic | ||
| innovium | ||
| marvell | ||
| marvell-arm64 | ||
| marvell-armhf | ||
| mellanox | ||
| nephos | ||
| p4 | ||
| pddf | ||
| template | ||
| vs | ||