Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix for platfrom detection and refactoring #20

Open
wants to merge 21 commits into
base: main
Choose a base branch
from

use `CHEF_` prefix for the ENV

3ba1f40
Select commit
Loading
Failed to load commit list.
Open

Fix for platfrom detection and refactoring #20

use `CHEF_` prefix for the ENV
3ba1f40
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed May 30, 2024 in 5s

3 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 high
  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 56 in lib/train-k8s-container/kubectl_exec_client.rb

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on a
library input
may run slow on strings starting with 'e]0;' and with many repetitions of 'e]0;'.

Check failure on line 56 in lib/train-k8s-container/kubectl_exec_client.rb

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on a
library input
may run slow on strings starting with 'e[' and with many repetitions of 'e['.

Check warning on line 29 in lib/train-k8s-container/kubectl_exec_client.rb

See this annotation in the file changed.

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.