Potential Issue regarding Code Injection

[nevercodecorrect]

In code here, it directly eval the value from environment variable. A malicous local actor could set something like export ALIGNMENT_PHOTOGRAMMETRY='os.system("touch rickroll")' to execute arbitrary commands. It would be better to use ast.literal_eval here.
This issue is similar to CVE-2022-2054.

[cmsbuild]

cms-bot internal usage

[cmsbuild]

A new Issue was created by @nevercodecorrect.

@smuzaffar, @makortel, @rappoccio, @Dr15Jones, @antoniovilela, @sextonkennedy can you please review it and eventually sign/assign? Thanks.

cms-bot commands are listed here

[makortel]

assign Alignment/MuonAlignmentAlgorithms

[cmsbuild]

New categories assigned: alca

@saumyaphor4252,@perrotta,@consuegs you have been requested to review this Pull request/Issue and eventually sign? Thanks