Flawfinder was recently updated upstream to support python >=3. We use Fedora packages to run our analyses, which were not updated downstream yet. I filed a bug in Fedora's bugzilla [1] asking for an update to this package.

This is just a bug to track those updates. We may also need to check if the version update breaks the tool's firehose parser.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1499873