[int] Check all remaining subprocess-with-shell calls

src/DIRAC/Core/Utilities/Subprocess.py

@@ -592,7 +592,7 @@ def shellCall(timeout, cmdSeq, callbackFunction=None, env=None, bufferLimit=5242
         result = shCall(timeout + 1)
     else:
         spObject = Subprocess(timeout, bufferLimit=bufferLimit)
-        result = spObject.systemCall(cmdSeq, callbackFunction=callbackFunction, env=env, shell=True)
+        result = spObject.systemCall(cmdSeq, callbackFunction=callbackFunction, env=env, shell=True)  #  nosec: B604
     return result
 
 

src/DIRAC/FrameworkSystem/Service/SystemAdministratorHandler.py

@@ -599,7 +599,7 @@ def __readHostInfo():
 
         # Disk occupancy
         summary = ""
-        _status, output = subprocess.getstatusoutput("df")
+        _status, output = subprocess.getstatusoutput("df")  # nosec: B605
         lines = output.split("\n")
         for i in range(len(lines)):
             if lines[i].startswith("/dev"):

src/DIRAC/WorkloadManagementSystem/JobWrapper/JobWrapper.py

@@ -1604,7 +1604,7 @@ def run(self):
         log.verbose("Cmd called", self.cmd)
         output = self.spObject.systemCall(
             self.cmd, env=self.exeEnv, callbackFunction=self.sendOutput, shell=True, start_new_session=True
-        )
+        )  # nosec: B604
         log.verbose(f"Output of system call within execution thread: {output}")
         self.executionResults["Thread"] = output
         timing = time.time() - start