Benign arch Download

obs-cmd 1.0.2-1

“A minimal OBS CLI for obs-websocket v5”

Archive contains path traversal entries (zip slip)AArch64 (ARM64) architecture string

SHA-25655cfa6e609000024c6b5f8f24f9d63ea92b4b30e273597d04c5a32ae2b622ff7

URLhttps://aur.archlinux.org/cgit/aur.git/snapshot/obs-cmd.tar.gz

Evidence

Cargo target build output path PKGBUILD · lines 3–24

3:10… bs-cmd
4pkgver=1.0.2
5pkgrel=1
6pkgdesc="A minimal OBS CLI for obs-websocket v5"
7arch=('x86_64')
8url="https://github.com/grigio/obs-cmd"
9license=('MIT')
10makedepends=('git' 'rust')
11provides=('obs-cmd')
12source=("${pkgname}-${pkgver}.tar.gz::https://github.com/grigio/${pkgname}/archive/refs/tags/v${pkgver}.tar.gz")
13
14# Upstream tar.gz
15sha512sums=('8ed18325f22f379ee159c3f6eec1093f6b41918ccb95fe8796383c8aef707243eeec4dcf2c4f96123532af93e3d0b03512e22eba6a5c4119cfe4e2cf470f8cbd')
16
17build() {
18  cd "${pkgname}-${pkgver}"
19  cargo build --release
20}
21
22package() {
23  install -Dm 755 "${srcdir}/${pkgname}-${pkgver}/target/release/obs-cmd" "${pkgdir}/usr/bin/obs-cmd"
24  install -Dm 644 "${srcdir}/${pkgname}-${pkgver}/LICENSE" -t "$pkgdir/usr/share/licenses/$pkg …

TruffleHog secret scanner reference docker_auth_config_test.go · lines 1–13

1package docker
2
3import (
4	"github.com/google/go-cmp/cmp"
5	"github.com/trufflesecurity/trufflehog/v3/pkg/context"
6	"github.com/trufflesecurity/trufflehog/v3/pkg/detectors"
7	"github.com/trufflesecurity/trufflehog/v3/pkg/engine/ahocorasick"
8	"testing"
9)
10
11func TestDocker_Pattern(t *testing.T) {
12	d := Scanner{}
13	ahoCorasickCore := ahocorasick.NewAhoCorasickCore([]detectors.Detector{d})

Candidate bytes decoded: base64 docker_auth_config_test.go · lines 20–26

71… b15dc8768962e21d22837/vertical-pod-autoscaler/e2e/vendor/k8s.io/kubernetes/test/e2e/common/node/runtime.go#L283C1-L290C2
{
	name: "GCP auth",
	input: `{
"auths": {
"https://gcr.io": {
	"auth": "X2pzb25fa2V5OnsKICAidHlwZSI6ICJzZXJ2aWNlX2FjY291bnQiLAogICJwcm9qZWN0X2lkIjogImF1dGhlbnRpY2F0ZWQtaW1hZ2UtcHVsbGluZyIsCiAgInByaXZhdGVfa2V5X2lkIjogImI5ZjJhNjY0YWE5YjIwNDg0Y2MxNT …

PEM private-key footer docker_auth_config_test.go · line 38

38:3303… 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 …

Registry password authentication client docker_auth_config_test.go · lines 93–96

{
	name:  "literal newlines",
	input: `{\n\"auths\": {\n\"registry.company.com\": {\n\"username\": \"conexp\",\n\"password\": \"FTA@CNCF0n@zure3\",\n\"email\": \"[email protected]\",\n\"auth\": \"Y29uZXhwOkZUQUBDTkNGMG5AenVyZTM=\"\n}\n}\n}\n`,
	wa …

No evidence locations were recorded for this file. Raw result