step-security/harden-runner
1
0
Fork 0
mirror of https://github.com/step-security/harden-runner.git synced 2026-06-05 21:17:06 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #15 from step-security/codeql

Browse source 
Address Codeql issues
This commit is contained in:
Varun Sharma 2021-11-20 06:53:37 -08:00 • committed by GitHub
commit 7206db2ec9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 20 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

11
dist/pre/index.js vendored
View file

@ -2417,10 +2417,17 @@ var __awaiter = (undefined && undefined.__awaiter) || function (thisArg, _argume
filePath.close();
console.log(`Step Security Job Correlation ID: ${correlation_id}`);
console.log(`View security insights and recommended policy at ${web_url}/github/${process.env["GITHUB_REPOSITORY"]}/actions/runs/${process.env["GITHUB_RUN_ID"]} after the run has finished`);
external_child_process_namespaceObject.execSync(`cp ${__dirname}/agent /home/agent/agent`);
let cmd = "cp", args = [external_path_.join(__dirname, "agent"), "/home/agent/agent"];
external_child_process_namespaceObject.execFileSync(cmd, args);
external_child_process_namespaceObject.execSync("chmod +x /home/agent/agent");
external_fs_.writeFileSync("/home/agent/agent.json", confgStr);
external_child_process_namespaceObject.execSync(`sudo cp ${__dirname}/agent.service /etc/systemd/system/agent.service`);
cmd = "sudo";
args = [
"cp",
external_path_.join(__dirname, "agent.service"),
"/etc/systemd/system/agent.service",
];
external_child_process_namespaceObject.execFileSync(cmd, args);
external_child_process_namespaceObject.execSync("sudo systemctl daemon-reload");
external_child_process_namespaceObject.execSync("sudo service agent start", { timeout: 15000 });
// Check that the file exists locally

2
dist/pre/index.js.map vendored
View file

File diff suppressed because one or more lines are too long

14
src/setup.ts
View file

@ -46,14 +46,20 @@ import { v4 as uuidv4 } from "uuid";
console.log(
`View security insights and recommended policy at ${web_url}/github/${process.env["GITHUB_REPOSITORY"]}/actions/runs/${process.env["GITHUB_RUN_ID"]} after the run has finished`
);
cp.execSync(`cp ${__dirname}/agent /home/agent/agent`);
let cmd = "cp",
args = [path.join(__dirname, "agent"), "/home/agent/agent"];
cp.execFileSync(cmd, args);
cp.execSync("chmod +x /home/agent/agent");
fs.writeFileSync("/home/agent/agent.json", confgStr);
cp.execSync(
`sudo cp ${__dirname}/agent.service /etc/systemd/system/agent.service`
);
cmd = "sudo";
args = [
"cp",
path.join(__dirname, "agent.service"),
"/etc/systemd/system/agent.service",
];
cp.execFileSync(cmd, args);
cp.execSync("sudo systemctl daemon-reload");
cp.execSync("sudo service agent start", { timeout: 15000 });