Skip to content

fix(security): prevent command injection via shell=True (CWE-78) #1941

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
bearomorphism wants to merge 1 commit into
base: master
Choose a base branch
from

fix(security): prevent command injection via shell=True (CWE-78)

90b055b
Select commit
Loading
Failed to load commit list.
Open

fix(security): prevent command injection via shell=True (CWE-78) #1941

fix(security): prevent command injection via shell=True (CWE-78)
90b055b
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded May 3, 2026 in 0s

98.23% (target 97.00%)

View this Pull Request on Codecov

98.23% (target 97.00%)

Details

Codecov Report

❌ Patch coverage is 98.50746% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 98.23%. Comparing base (b4f4209) to head (90b055b).
⚠️ Report is 3 commits behind head on master.
✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
commitizen/commands/init.py 80.00% 1 Missing ⚠️
Additional details and impacted files 
@@            Coverage Diff             @@
##           master    #1941      +/-   ##
==========================================
+ Coverage   98.10%   98.23%   +0.12%     
==========================================
  Files          61       61              
  Lines        2748     2772      +24     
==========================================
+ Hits         2696     2723      +27     
+ Misses         52       49       -3

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

View more details on Codecov