Skip to content

feat: allow shell commands through sh -c and shlex

Andrew Jungrequested to merge
1575/shell-run-commands-resolution into main

What does this merge request do and why?

Follow up merge request to: !3601 (merged)

Issue: #1575

How to set up and validate locally

Run the resolve sast vulnerability and monitor that there are no warnings/errors about pipe:

DEBUG runner/runner.go:235 Action result {"correlation_id": "01K7NZ3GJJXPZGR5P8NC5G9S27", "workflow_id": "39", "result": "Error running tool: exit status 1. Result: find: 2>/dev/null: unknown primary or operator\n"}

Example setup instructions: !3489 (merged)

Merge request checklist

  • Tests added for new functionality. If not, please raise an issue to follow up.
  • Documentation added/updated, if needed.
  • If this change requires executor implementation: verified that issues/MRs exist for both Go executor and Node executor or confirmed that changes are backward-compatible and don't break existing executor functionality.

Merge request reports