Chuck 60b64144a5 fix(install): suppress remaining Codacy subprocess false-positive ...

Codacy's Semgrep-based check still flagged the cmd-built subprocess.run
call as "without a static string" even with the Bandit nosec applied.
Add a nosemgrep marker alongside it - cmd is always a hardcoded
apt/pip argument list, never user input.

2026-06-11 13:01:33 -04:00

8.0 KiB

Raw Blame History

View Raw