go/goreleaser
go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-03-17 20:47:50 +02:00
Code Issues Releases Activity

Merge pull request from GHSA-h3q2-8whx-c29h

Browse Source 
this could potentially leak environment variables.

closes GHSA-h3q2-8whx-c29h

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
This commit is contained in:
Carlos Alexandro Becker 2024-01-29 20:53:46 -03:00 committed by GitHub
parent 75c6d1a580
commit d5b6a533ca
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
internal/exec/exec.go
View File

@ -86,7 +86,6 @@ func executePublisher(ctx *context.Context, publisher config.Publisher) error {
func executeCommand(c *command, artifact *artifact.Artifact) error {
log.WithField("args", c.Args).
WithField("env", c.Env).
WithField("artifact", artifact.Name).
Debug("executing command")

3
internal/pipe/sbom/sbom.go
View File

@ -201,8 +201,7 @@ func catalogArtifact(ctx *context.Context, cfg config.SBOM, a *artifact.Artifact
cmd.Env = append(cmd.Env, envs...)
cmd.Dir = ctx.Config.Dist
log.WithField("env", cmd.Env).
WithField("dir", cmd.Dir).
log.WithField("dir", cmd.Dir).
WithField("cmd", cmd.Args).
Debug("running")

1
internal/shell/shell.go
View File

@ -18,7 +18,6 @@ import (
func Run(ctx *context.Context, dir string, command, env []string, output bool) error {
log := log.
WithField("cmd", command).
WithField("env", env).
WithField("dir", dir)
/* #nosec */