fix: CWE-23 detected by Snyk in apply_spec_filters

- RHINENG-14792, RHINENG-14796

Signed-off-by: Xiangce Liu <[email protected]>

insights/tools/apply_spec_filters.py

@@ -42,6 +42,8 @@ def apply_filters(_format, _plugins, output=None):
 
     load_packages(parse_plugins(_plugins))
 
+    output = os.path.realpath(output)
+
     if _format == "yaml":
         yaml_path = output
         if not yaml_path:
@@ -85,12 +87,12 @@ def apply_filters(_format, _plugins, output=None):
         uploader_json["version"] = datetime.now().isoformat()
 
         pattern = re.compile(",")
-        output = "\n".join(
+        json_content = "\n".join(
             pattern.sub(",", l) for l in json.dumps(uploader_json, indent=4).splitlines()
         )
 
         with open(json_path, "w") as fp:
-            fp.write(output)
+            fp.write(json_content)
     return 0