Commit 1f358e8
committed
Clean filepath before reading the content
Looks like security job is failing because it detect unsanitized input
from file, this should fix following
```
✗ [Medium] Path Traversal
ID: 2ce4a8d7-4fb1-41b5-8841-dc76ea48e503
Path: pkg/crc/machine/bundle/repository.go, line 41
Info: Unsanitized input from file name flows into os.ReadFile, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to read arbitrary files.
```1 parent a198680 commit 1f358e8
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
38 | 38 | | |
39 | 39 | | |
40 | 40 | | |
41 | | - | |
| 41 | + | |
42 | 42 | | |
43 | 43 | | |
44 | 44 | | |
| |||
0 commit comments