From f48090fb1059993d54143273ef466233fb97b82c Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Sun, 23 Jul 2017 12:39:44 -0400 Subject: [PATCH] Refs #3646 -- Don't use shell globbing in our release script --- release.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/release.py b/release.py index f10eed418939..09b1012aa695 100644 --- a/release.py +++ b/release.py @@ -5,6 +5,7 @@ from __future__ import absolute_import, division, print_function import getpass +import glob import io import os import subprocess @@ -106,10 +107,11 @@ def release(version): run("python", "setup.py", "sdist") run("python", "setup.py", "sdist", "bdist_wheel", cwd="vectors/") - run( - "twine", "upload", "-s", "dist/cryptography-{0}*".format(version), - "vectors/dist/cryptography_vectors-{0}*".format(version), shell=True + packages = ( + glob.glob("dist/cryptography-{0}*".format(version)) + + glob.glob("vectors/dist/cryptography_vectors-{0}*".format(version)) ) + run("twine", "upload", "-s", *packages) session = requests.Session()