DevSecOps: Defence against Trojan Source (bidirectional/malicious unicode) about buskill-app HOT 4 CLOSED

 This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters

apt-get install black
wget -qO commenting-out.py https://raw.githubusercontent.com/nickboucher/trojan-source/main/Python/commenting-out.py
black commenting-out.py

user@disp769:~/sandbox$ black commenting-out.py
reformatted commenting-out.py
All done! ✨ 🍰 ✨
1 file reformatted.
user@disp769:~/sandbox$ python3 commenting-out.py 
You are an admin.
user@disp769:~/sandbox$ 

user@disp769:~/sandbox$ wget -qO commenting-out.py https://raw.githubusercontent.com/nickboucher/trojan-source/main/Python/commenting-out.py
user@disp769:~/sandbox$ pyflakes commenting-out.py 
user@disp769:~/sandbox$ python3 commenting-out.py 
You are an admin.
user@disp769:~/sandbox$ 

user@disp769:~/sandbox$ wget -qO commenting-out.py https://raw.githubusercontent.com/nickboucher/trojan-source/main/Python/commenting-out.py
user@disp769:~/sandbox$ pycodestyle commenting-out.py 
commenting-out.py:4:29: E261 at least two spaces before inline comment
commenting-out.py:5:31: W292 no newline at end of file
user@disp769:~/sandbox$ python3 commenting-out.py 
You are an admin.
user@disp769:~/sandbox$ 

user@disp769:~/sandbox$ wget -qO commenting-out.py https://raw.githubusercontent.com/nickboucher/trojan-source/main/Python/commenting-out.py
user@disp769:~/sandbox$ yapf -i commenting-out.py
user@disp769:~/sandbox$ python3 commenting-out.py 
You are an admin.
user@disp769:~/sandbox$ 

user@disp769:~/sandbox$ wget -qO commenting-out.py https://raw.githubusercontent.com/nickboucher/trojan-source/main/Python/commenting-out.py
user@disp769:~/sandbox$ bandit commenting-out.py
[main]	INFO	profile include tests: None
[main]	INFO	profile exclude tests: None
[main]	INFO	cli include tests: None
[main]	INFO	cli exclude tests: None
[main]	INFO	running on Python 3.7.3
[node_visitor]	INFO	Unable to find qualified name for module: commenting-out.py
Run started:2021-11-14 23:04:46.645931

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 3
	Total lines skipped (#nosec): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0.0
		Low: 0.0
		Medium: 0.0
		High: 0.0
	Total issues (by confidence):
		Undefined: 0.0
		Low: 0.0
		Medium: 0.0
		High: 0.0
Files skipped (0):
user@disp769:~/sandbox$ python3 commenting-out.py 
You are an admin.
user@disp769:~/sandbox$ 

user@disp769:~/sandbox$ wget -qO commenting-out.py https://raw.githubusercontent.com/nickboucher/trojan-source/main/Python/commenting-out.py
user@disp769:~/sandbox$ dodgy commenting-out.py
{
  "warnings": []
}
user@disp769:~/sandbox$ python3 commenting-out.py 
You are an admin.
user@disp769:~/sandbox$