title: Starting a process with a shell, possible injection detected, security issue
body: <p>Using<code>bandit</code> for checking the code for vulnerability issues. </p>
  
  <p><a href="https://docs.openstack.org/bandit/1.4.0/plugins/start_process_with_a_shell.html" rel="nofollow noreferrer">https://docs.openstack.org/bandit/1.4.0/plugins/start_process_with_a_shell.html</a></p>
  
  <p>How to go about resolving this? Is there an alternative to using <code>commands</code> library( i.e <code>commands.getoutput</code>)? Please advise.</p>
  
  <p>( python 2.7)<br>
  New to this security field, kindly update the tags if these aren't appropriate. </p>
  
  <p>Here it says, <a href="https://github.com/openstack/bandit/blob/master/bandit/plugins/injection_shell.py#L62" rel="nofollow noreferrer">https://github.com/openstack/bandit/blob/master/bandit/plugins/injection_shell.py#L62</a> </p>
  
  <p>commands.getoutput is vulnerable, but doesn't suggest a replacement! Ugh!</p>
  
  <p>Could sombebody please recommend a solution to this. Thank you.</p>