-
Notifications
You must be signed in to change notification settings - Fork 30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add support for .NET 8 deployments #793
Conversation
// ProjectDefinitionParser will have transformed projectDirectory to an absolute path, | ||
// and DockerFileName is static so traversal should not be possible here. | ||
// nosemgrep: csharp.lang.security.filesystem.unsafe-path-combine.unsafe-path-combine | ||
File.WriteAllText(Path.Combine(projectDirectory, DockerFileName), dockerFile); | ||
File.WriteAllText(Path.Combine(projectDirectory, Constants.Docker.DefaultDockerfileName), dockerFile); |
Check warning
Code scanning / Semgrep
String argument projectDirectory is used to read or write data from a file via Path.Combine without direct sanitization via Path.GetFileName. If the path is user-supplied data this can lead to path traversal. Warning
Codecov ReportAttention:
Additional details and impacted files@@ Coverage Diff @@
## dev #793 +/- ##
==========================================
+ Coverage 61.27% 61.46% +0.19%
==========================================
Files 276 277 +1
Lines 10554 10659 +105
Branches 1463 1484 +21
==========================================
+ Hits 6467 6552 +85
- Misses 3547 3566 +19
- Partials 540 541 +1
☔ View full report in Codecov by Sentry. |
Issue #, if available:
DOTNET-7160
DOTNET-7159
DOTNET-7201
Description of changes:
Release of the feature branch which includes approved PRs:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.