noqa placement: ruff anchors S607 to the args list, not the call

2026-07-13 16:53:59 +00:00
parent 0e9e22da18
commit 8a82bde531
1 changed files with 2 additions and 2 deletions
@@ -87,8 +87,8 @@ class TrueCloudPatchUpdateAlertSource(ThreadedAlertSource):
        # this file -- nothing user-supplied reaches the command line. The partial
        # `git` path is moot: this runs as root inside middlewared, so anyone who
        # can poison PATH already has root.
-        return subprocess.run(  # noqa: S603, S607
-            ["git", "-C", PATCH_DIR, *args],
+        return subprocess.run(  # noqa: S603
+            ["git", "-C", PATCH_DIR, *args],  # noqa: S607
            capture_output=True, text=True, timeout=_TIMEOUT, check=True,
        ).stdout