[ https://issues.apache.org/jira/browse/AIRFLOW-2888?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16786696#comment-16786696 ]
ASF subversion and git services commented on AIRFLOW-2888: ---------------------------------------------------------- Commit 1dae31990b5f271c6c2a645dadf0f146ddce0c10 in airflow's branch refs/heads/v1-10-stable from Ash Berlin-Taylor [ https://gitbox.apache.org/repos/asf?p=airflow.git;h=1dae319 ] [AIRFLOW-2888] Add deprecation path for task_runner config change (#4851) This change allows users to seamlessly upgrade without a hard-to-debug error when a task is actually run. This allows us to pull the change in to 1.10.3 > Do not use Shell=True and bash to launch tasks > ---------------------------------------------- > > Key: AIRFLOW-2888 > URL: https://issues.apache.org/jira/browse/AIRFLOW-2888 > Project: Apache Airflow > Issue Type: Bug > Reporter: Bolke de Bruin > Priority: Major > Fix For: 1.10.3 > > > Using shell=True is a security risk and there is no need to use bash -- This message was sent by Atlassian JIRA (v7.6.3#76005)