johno/beads
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'main' of https://github.com/steveyegge/beads

Browse Source
This commit is contained in:
Steve Yegge
2025-11-22 16:49:54 -08:00
parent 3effab3714 3aeca3413a
commit 9209725c82
1 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
cmd/bd/merge_security_test.go
View File

@@ -3,6 +3,7 @@ package main
import ( import (
"os" "os"
"path/filepath" "path/filepath"
"runtime"
"testing" "testing"
) )
@@ -110,8 +111,11 @@ func TestCleanupMergeArtifacts_CommandInjectionPrevention(t *testing.T) {
// exec.Command safely handled the filename. // exec.Command safely handled the filename.
// Verify that sensitive paths are NOT affected // Verify that sensitive paths are NOT affected
if _, err := os.Stat("/etc/passwd"); err != nil { // Note: /etc/passwd only exists on Unix systems, so skip this check on Windows
t.Errorf("Command injection may have occurred - /etc/passwd missing") if runtime.GOOS != "windows" {
if _, err := os.Stat("/etc/passwd"); err != nil {
t.Errorf("Command injection may have occurred - /etc/passwd missing")
}
} }
}) })
} }
@@ -129,14 +133,14 @@ func TestCleanupMergeArtifacts_OnlyBackupFiles(t *testing.T) {
// Create various files // Create various files
files := map[string]bool{ files := map[string]bool{
"issues.jsonl": false, // Should NOT be removed "issues.jsonl": false, // Should NOT be removed
"beads.db": false, // Should NOT be removed "beads.db": false, // Should NOT be removed
"backup.jsonl": true, // Should be removed "backup.jsonl": true, // Should be removed
"issues.jsonl.backup": true, // Should be removed "issues.jsonl.backup": true, // Should be removed
"BACKUP_FILE": true, // Should be removed (case-insensitive) "BACKUP_FILE": true, // Should be removed (case-insensitive)
"my_backup_2024.txt": true, // Should be removed "my_backup_2024.txt": true, // Should be removed
"important_data.jsonl": false, // Should NOT be removed "important_data.jsonl": false, // Should NOT be removed
"issues.jsonl.bak": false, // Should NOT be removed (no "backup") "issues.jsonl.bak": false, // Should NOT be removed (no "backup")
} }
for filename := range files { for filename := range files {