Skip to content

Curl bashing detectection #4

@avbasov

Description

@avbasov

Hello. Thanks for this useful plugin.

Plugin version: 2.0.14

I got a false positive Curl bashing detected for this code snippet.

RUN curl -L "https://github.com/go-task/task/releases/download/${TASK_VERSION}/task_${TARGETOS}_${TARGETARCH}.tar.gz" -o "/tmp/task_${TARGETOS}_${TARGETARCH}.tar.gz" \
    && curl -L "https://github.com/go-task/task/releases/download/${TASK_VERSION}/task_checksums.txt" -o "/tmp/task_checksums.txt" \
    && cd /tmp && grep "task_${TARGETOS}_${TARGETARCH}.tar.gz" task_checksums.txt | sha256sum -c - \
    && tar -C /opt -xzf "/tmp/task_${TARGETOS}_${TARGETARCH}.tar.gz" task

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions