Add 'nosec' skips for Bandit in dev scripts and tests

Author: lukaszstolarczuk

scripts/generate_docs.py

@@ -1,13 +1,13 @@
 """
- Copyright (C) 2023 Intel Corporation
+ Copyright (C) 2023-2024 Intel Corporation
  
  Under the Apache License v2.0 with LLVM Exceptions. See LICENSE.TXT.
  SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
 """
 
 from pathlib import Path
 from shutil import rmtree
-import subprocess
+import subprocess   # nosec B404
 import time
 
 
@@ -41,9 +41,8 @@ def _prepare_docs_dir(docs_path: Path) -> None:
 def _generate_xml(config_path: Path, docs_path: Path) -> None:
     print("Generating XML files with doxygen...", flush=True)
     try:
-        subprocess.run(
-            ["doxygen", Path(config_path, "Doxyfile")], text=True
-        ).check_returncode()
+        subprocess.run(["doxygen", Path(config_path, "Doxyfile")], text=True
+                       ).check_returncode()    # nosec B603, B607
         print(f"All XML files generated in {docs_path}", flush=True)
     except subprocess.CalledProcessError as ex:
         print("Generating XML files failed!")
@@ -54,9 +53,8 @@ def _generate_xml(config_path: Path, docs_path: Path) -> None:
 def _generate_html(config_path: Path, docs_path: Path) -> None:
     print("Generating HTML pages with sphinx...", flush=True)
     try:
-        subprocess.run(
-            ["sphinx-build", config_path, Path(docs_path, "html")], text=True
-        ).check_returncode()
+        subprocess.run(["sphinx-build", config_path, Path(docs_path, "html")], text=True
+                       ).check_returncode()    # nosec B603, B607
         print(f"All HTML files generated in {docs_path}", flush=True)
     except subprocess.CalledProcessError as ex:
         print("Generating HTML pages failed!")

test/test_installation.py

@@ -9,7 +9,7 @@
 import difflib
 from pathlib import Path
 import platform
-import subprocess
+import subprocess   # nosec B404
 import sys
 from typing import List
 
@@ -143,7 +143,7 @@ def install_umf(self) -> None:
 
         install_cmd = f"cmake --install {self.build_dir} --config {self.build_type.title()} --prefix {self.install_dir}"
         try:
-            subprocess.run(install_cmd.split()).check_returncode()
+            subprocess.run(install_cmd.split()).check_returncode()      # nosec B603
         except subprocess.CalledProcessError:
             sys.exit(f"Error: UMF installation command '{install_cmd}' failed")
 
@@ -180,7 +180,7 @@ def uninstall_umf(self) -> None:
         """
         uninstall_cmd = f"cmake --build {self.build_dir} --target uninstall"
         try:
-            subprocess.run(uninstall_cmd.split()).check_returncode()
+            subprocess.run(uninstall_cmd.split()).check_returncode()    # nosec B603
         except subprocess.CalledProcessError:
             sys.exit(f"Error: UMF uninstallation command '{uninstall_cmd}' failed")