dtomlinson/csops
1
0
Fork 0
mirror of https://github.com/dtomlinson91/csops.git synced 2025-12-22 05:45:45 +00:00
Code Issues Projects Releases Wiki Activity

refactor: disable spawning a shell on subprocess

Browse Source
This commit is contained in:
Daniel Tomlinson
2022-01-27 01:42:07 +00:00
parent 1a90618808
commit 91519e232d
1 changed files with 13 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
csops/run.py
View File

@@ -8,25 +8,30 @@ from csops._version import __version__
def encrypt(args): def encrypt(args):
encrypted_filename = f"{args.file.stem}.enc{args.file.suffix}" encrypted_filename = f"{args.file.stem}.enc{args.file.suffix}"
subprocess.run( encrypted_contents = subprocess.run(
"sops --encrypt --gcp-kms " ["sops", "--encrypt", "--gcp-kms", CONFIG.gcp_kms_key, args.file],
f"{CONFIG.gcp_kms_key} {args.file} > {encrypted_filename}",
check=True, check=True,
text=True, text=True,
shell=True, shell=False,
capture_output=True,
) )
with pathlib.Path(encrypted_filename).open("w", encoding="utf-8") as file:
file.write(encrypted_contents.stdout)
print(encrypted_filename) print(encrypted_filename)
raise SystemExit(0) raise SystemExit(0)
def decrypt(args): def decrypt(args):
decrypted_filename = f"{args.file.stem.split('.')[0]}{args.file.suffix}" decrypted_filename = f"{args.file.stem.split('.')[0]}{args.file.suffix}"
subprocess.run( decrypted_contents = subprocess.run(
f"sops --decrypt {args.file} > {decrypted_filename}", ["sops", "--decrypt", args.file],
check=True, check=True,
text=True, text=True,
shell=True, shell=False,
capture_output=True,
) )
with pathlib.Path(decrypted_filename).open("w", encoding="utf-8") as file:
file.write(decrypted_contents.stdout)
print(decrypted_filename) print(decrypted_filename)
raise SystemExit(0) raise SystemExit(0)
@@ -35,7 +40,7 @@ def run():
parser = argparse.ArgumentParser() parser = argparse.ArgumentParser()
parser.add_argument("flag", type=str, nargs=1) parser.add_argument("flag", type=str, nargs=1)
parser.add_argument("file", type=pathlib.Path) parser.add_argument("file", type=pathlib.Path)
parser.add_argument('-v', '--version', action='version', version='%(prog)s ' + __version__) parser.add_argument("-v", "--version", action="version", version="%(prog)s " + __version__)
args = parser.parse_args() args = parser.parse_args()
try: try: