cider-security-research / cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Apache License 2.0
1.95k stars 323 forks source link

gitea/repositories/mock-turtle/Jenkinsfile broken stipulation #85

Open SS4ar opened 4 months ago

SS4ar commented 4 months ago

hi, i think here a contradictory terms if [ $(wc -l <version) -eq 0 -a $(grep -Po "^\\d{1,2}\\.\\d{1,2}\\.\\d{1,2}$" version) ] ; then check2=true; else check2=false; fi we must make file with 0 strings and with number

Oakleysecurity commented 3 weeks ago

hi, i think here a contradictory terms if [ $(wc -l <version) -eq 0 -a $(grep -Po "^\\d{1,2}\\.\\d{1,2}\\.\\d{1,2}$" version) ] ; then check2=true; else check2=false; fi we must make file with 0 strings and with number

I also encountered the same problem