Skip to content

test(command-injection): pin four cases decided in #208 (#219) - #227

Merged
SizzleUnrlsd merged 1 commit into
mainfrom
test/pin-command-cases-219
Oct 7, 2026
Merged

SizzleUnrlsd merged 1 commit into
mainfrom
test/pin-command-cases-219

Conversation

@SizzleUnrlsd

Copy link
Copy Markdown
Contributor

Summary

Pins four calls whose results were decided in #208, in a new test file so no existing test changes:

Call Expected
subprocess.run(["pwsh", "-command", "&", x]) high, vulnerability
subprocess.run(["pwsh", "-Command", "Get-Item", x]) high, vulnerability
subprocess.run(["node", "-pe", "CODE", f"v{x}"]) refuted
subprocess.run(["pwsh", "-File", "s.ps1", x]) medium, vulnerability

Test-only change; no production code changes.

Closes #219

@SizzleUnrlsd SizzleUnrlsd added the test Tests only label Oct 7, 2026
@SizzleUnrlsd SizzleUnrlsd self-assigned this Oct 7, 2026
@SizzleUnrlsd
SizzleUnrlsd merged commit d5a7cd1 into main Oct 7, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test Tests only

Projects

None yet

Development

Successfully merging this pull request may close these issues.

command-injection: pin four decided cases of #208 in tests

1 participant