T08 · Insecure Dependencies
Error
- Location
scripts/api_key.py:62- Finding
Implicit Pre-Release Plugin Installation and Cloud API-Key Provisioning
- Content
View full analysis
bool: """Auto-install the ModelStudio plugin.""" try: print("Auto-installing ModelStudio plugin...", file=sys.stderr) result = subprocess.run( ["aliyun", "plugin", "install", "--names", "aliyun-cli-modelstudio", "--enable-pre"], capture_output=True, text=True, timeout=60 ) if result.returncode == 0: print("✓ ModelStudio plugin installed successfully", file=sys.stderr) return True print(f"⚠️ ModelStudio plugin installation failed: {result.stderr.strip()}", file=sys.stderr) return False except (subprocess.TimeoutExpired, FileNotFoundError): return False def check_aliyun_cli() -> bool: """Check if Alibaba Cloud CLI and ModelStudio plugin are available. Auto-installs plugin if missing.""" if not _check_aliyun_binary(): return False try: result = subprocess.run( ["aliyun", "modelstudio", "version"], capture_output=True, text=True, timeout=5 ) if result.returncode == 0: return True except (subprocess.TimeoutExpired, FileNotFoundError): pass if not _install_modelstudio_plugin(): return False ``` ```python # Priority 3: Auto-create via Alibaba Cloud CLI if check_aliyun_cli(): print("No existing API Key found, auto-creating via Alibaba Cloud CLI...", file=sys.stderr) try: api_key_value, api_key_id = generate_api_key() save_api_key_to_config(api_key_value, api_key_id=api_key_id) print("✓ API Key auto-created and saved to Alibaba Cloud CLI config", file=sys.stderr) ...[truncated 2423 chars]- Remediation
View remediation