docker pull 'ghcr.io/kryptsec/sqli-auth-bypass:latest'

[PatrickHenley]

Description

This type of error appears regardless of which challenge I try to do. Instead the error would like this this: docker pull 'ghcr.io/kryptsec/challenge-name:latest

Steps to Reproduce

1. Run 'oasis'
2. Select 'Run Benchmark'
3. Select 'online challenges (registry)'
4. Select challenge (Eg: SQL Injection)
5. Select Provider (Eg: Google, Ollama)
6. Select Model (Eg: models/aqa)
7. Select Yes/No for "Run analysis after benchmark?"
8. Start Benchmark
9. Should get the following error

   command error: Command failed: docker pull 'ghcr.io/kryptsec/sqli-auth-bypass:latest' invalid reference format

Expected Behavior

Was expecting to see the challenge appear or at least the benchmarking process happening

Actual Behavior

Just error appeared and run me to oasis "homepage"

Severity

Low - cosmetic or minor issue

OASIS Version

0.1.4

Node.js Version

v24.12.0

Operating System

Windows 11

Docker Version

29.2.1, build a5c7197

[Treelovah]

This is a Windows shell quoting bug — shellEscape() wraps arguments in POSIX single quotes, which cmd.exe doesn't recognize as quoting characters. They get passed literally as part of the image name, so Docker sees 'ghcr.io/kryptsec/sqli-auth-bypass:latest' (apostrophes and all) and rightfully rejects it.

Fix is up in PR #64. In the meantime, running OASIS under WSL will work around it.