go/goreleaser
1
0
Fork 0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-11-06 09:09:29 +02:00
Code Issues Releases Activity

Merge pull request from GHSA-h3q2-8whx-c29h

Browse Source 
this could potentially leak environment variables.

closes GHSA-h3q2-8whx-c29h

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
This commit is contained in:
Carlos Alexandro Becker
2024-01-29 20:53:46 -03:00
committed by GitHub
parent 75c6d1a580
commit d5b6a533ca
3 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
internal/pipe/sbom/sbom.go
View File

@@ -201,8 +201,7 @@ func catalogArtifact(ctx *context.Context, cfg config.SBOM, a *artifact.Artifact
cmd.Env = append(cmd.Env, envs...)
cmd.Dir = ctx.Config.Dist
log.WithField("env", cmd.Env).
WithField("dir", cmd.Dir).
log.WithField("dir", cmd.Dir).
WithField("cmd", cmd.Args).
Debug("running")