fortify / fcli

fcli is a command-line utility for interacting with various Fortify products
https://fortify.github.io/fcli/
Other
29 stars 16 forks source link

fcli variables in commands only work when provided as standalone token #394

Closed psmf22 closed 11 months ago

psmf22 commented 11 months ago

When using fcli variables in commands the following will work

sc-sast scan start -v ::highestSensor::scaVersion

but this will not:

sc-sast scan start -v=::highestSensor::scaVersion

in the second case fcli will just pass through the literal string value instead of the variable content.

This should either be fixed (for example by changing our matching expression to something like ^(?:-[a-zA-Z0-9]{1,}=){0,1}::([a-zA-Z0-9_]+)::(.*)$) or properly documented.