Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Chef 11169 optimize k8s container connection v2 #22

Open
wants to merge 17 commits into
base: main
Choose a base branch
from

catch syntax error

4cb1485
Select commit
Loading
Failed to load commit list.
Open

Chef 11169 optimize k8s container connection v2 #22

catch syntax error
4cb1485
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed May 29, 2024 in 4s

3 new alerts including 2 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 high
  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 56 in lib/train/k8s/container/kubectl_exec_client.rb

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on a
library input
may run slow on strings starting with 'e]0;' and with many repetitions of 'e]0;'.

Check failure on line 56 in lib/train/k8s/container/kubectl_exec_client.rb

See this annotation in the file changed.

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on a
library input
may run slow on strings starting with 'e[' and with many repetitions of 'e['.

Check warning on line 29 in lib/train/k8s/container/kubectl_exec_client.rb

See this annotation in the file changed.

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.
This string construction which depends on
library input
is later used in a
shell command
.