Skip to content

Commit 0e23fb3

Browse files
committed
Add to brakeman ignore for git read
1 parent f320762 commit 0e23fb3

File tree

1 file changed

+5
-5
lines changed

1 file changed

+5
-5
lines changed

config/brakeman.ignore

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,27 +3,27 @@
33
{
44
"warning_type": "Command Injection",
55
"warning_code": 14,
6-
"fingerprint": "2b810f11e65f8681ae0111adffe00fbda55ea1728a4208f26bc0947109335b20",
6+
"fingerprint": "ee467aaea70b8a7b361ef6e8ee6c5082b3ff265dc67d798ea3f24c1687ff4584",
77
"check_name": "Execute",
88
"message": "Possible command injection",
99
"file": "app/models/examples/app_file.rb",
10-
"line": 81,
10+
"line": 91,
1111
"link": "https://brakemanscanner.org/docs/warning_types/command_injection/",
12-
"code": "`git show #{@revision}:#{@path}`",
12+
"code": "`(cd #{ENV.fetch(\"REPOSITORY_ROOT\", \".\")} && git show #{@revision}:#{@path}) 2>/dev/null`",
1313
"render_path": null,
1414
"location": {
1515
"type": "method",
1616
"class": "Examples::AppFile",
1717
"method": "git_read"
1818
},
19-
"user_input": "@revision",
19+
"user_input": "ENV.fetch(\"REPOSITORY_ROOT\", \".\")",
2020
"confidence": "Medium",
2121
"cwe_id": [
2222
77
2323
],
2424
"note": ""
2525
}
2626
],
27-
"updated": "2024-07-14 21:34:23 -0400",
27+
"updated": "2024-08-22 08:48:23 -0400",
2828
"brakeman_version": "6.1.2"
2929
}

0 commit comments

Comments
 (0)