-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Config workflow #6
Conversation
if (this.isImageFile(imageFilePath)) { | ||
const execCommand = `${this.config.execMain} ${this.config.components.x} ${this.config.components.y} ${imageFilePath}`; | ||
|
||
const hash = execSync(execCommand).toString(); |
Check warning
Code scanning / CodeQL
Shell command built from environment values Medium
absolute path
const imageHashFile = `${imageFilePath}.hash`; | ||
|
||
if (this.isImageFile(imageFilePath)) { | ||
const execCommand = `${this.config.execMain} ${this.config.components.x} ${this.config.components.y} ${imageFilePath}`; |
Check warning
Code scanning / CodeQL
Unsafe shell command constructed from library input Medium
library input
shell command
This string concatenation which depends on
library input
shell command
This string concatenation which depends on
library input
shell command
🎉 This PR is included in version 1.1.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
Description of change
Pull-Request Checklist
main
branchnpm run lint
passes with this changenpm run test
passes with this changeFixes #0000