📊 Summary

• Total Issues: 3
• Error Issues: 3

🔍 Failure Condition Results

Failed Conditions

• global_fail_if: output.issues && output.issues.some(i => i.severity === 'critical' || i.severity === 'error')
  • Severity: ❌ error

Issues by Category

Security (2)

• ❌ ci/images/plugin-compiler/Dockerfile:44 - The BUILD_TAG build argument is used unquoted in the go install command, leading to a potential command injection vulnerability. A malicious value for BUILD_TAG (e.g., foo; rm -rf /) could allow arbitrary code execution during the Docker image build process. This could compromise the build environment and the source code added to the image.
• ❌ ci/images/plugin-compiler/data/build.sh:151 - The BUILD_TAG environment variable is used unquoted in the go build command, leading to a potential command injection vulnerability. A user of the plugin compiler image could set a malicious BUILD_TAG environment variable (e.g., foo; rm -rf /) to execute arbitrary code inside the container. This could be used to compromise the plugin source code or other sensitive data in the container's environment.

Logic (1)

• ❌ system:0 - Global failure condition met: output.issues && output.issues.some(i => i.severity === 'critical' || i.severity === 'error')

Powered by Visor from Probelabs

💡 TIP: You can chat with Visor using /visor ask <your question>