Skip to content

Commit c75b920

Browse files
authored
Add workaround for zeek/3534 on Windows (#7)
1 parent c640478 commit c75b920

File tree

2 files changed

+9
-2
lines changed

2 files changed

+9
-2
lines changed

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -109,7 +109,7 @@ jobs:
109109

110110
- name: Finish packaging artifact
111111
run: ./release.sh
112-
shell: sh
112+
shell: bash
113113

114114
- name: Upload artifact
115115
uses: actions/upload-artifact@v4

release.sh

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
#!/bin/sh -ex
1+
#!/bin/bash -ex
22

33
case $(uname) in
44
Darwin|Linux)
@@ -75,6 +75,13 @@ install_zeek_package salesforce/hassh 76a47abe9382109ce9ba530e7f1d7014a4a95209
7575
install_zeek_package salesforce/ja3 421dd4f3616b533e6971bb700289c6bb8355e707
7676
echo "@load policy/protocols/conn/community-id-logging" | $sudo tee -a /usr/local/zeek/share/zeek/site/local.zeek
7777

78+
# Work around https://github.com/zeek/zeek/issues/3534 on Windows
79+
[[ $(uname) =~ "NT" ]] &&
80+
sed -i \
81+
-e 's|^@load protocols/ssh/interesting-hostnames|#\0 # https://github.com/zeek/zeek/issues/3534 workaround|' \
82+
-e 's|^@load frameworks/files/detect-MHR|#\0 # https://github.com/zeek/zeek/issues/3534 workaround|' \
83+
/usr/local/zeek/share/zeek/site/local.zeek
84+
7885
#
7986
# Create zip file.
8087
#

0 commit comments

Comments
 (0)