guarddog icon indicating copy to clipboard operation
guarddog copied to clipboard

"failed to run rule repository_integrity_mismatch: Error while cloning repository authentication required but no callback set with github url https://github.com/grpc/grpc"

Open cedricvanrompay-datadog opened this issue 8 months ago • 0 comments

Example:

➜  guarddog git:(v1.10.0) poetry run guarddog pypi scan --version=1.56.0 grpcio-tools
Found 2 potentially malicious indicators in grpcio-tools

code-execution: found 2 source code matches
  * This package is executing OS commands in the setup.py file at grpcio-tools-1.56.0/setup.py:91
        cpp_test = subprocess.Popen([cxx, '-x', 'c++', '-std=c++14', '-'],
                                    stdin=PIPE,
                                    stdout=PIPE,
                                    stderr=PIPE)
  * This package is executing OS commands in the setup.py file at grpcio-tools-1.56.0/setup.py:100
        cpp_test = subprocess.Popen(
            [cxx, '-x', 'c++', '-std=c++14', '-', '-latomic'],
            stdin=PIPE,
            stdout=PIPE,
            stderr=PIPE)

Some rules failed to run while scanning grpcio-tools:

* potentially_compromised_email_domain: failed to run rule potentially_compromised_email_domain: can't compare offset-naive and offset-aware datetimes
* repository_integrity_mismatch: failed to run rule repository_integrity_mismatch: Error while cloning repository authentication required but no callback set with github url https://github.com/grpc/grpc

I would say this is a bug from pygit2 because using git I have no problem cloning this repository:

➜  /tmp git clone https://github.com/grpc/grpc
Cloning into 'grpc'...
remote: Enumerating objects: 771379, done.
remote: Counting objects: 100% (2673/2673), done.
remote: Compressing objects: 100% (1761/1761), done.
remote: Total 771379 (delta 1568), reused 1404 (delta 889), pack-reused 768706
Receiving objects: 100% (771379/771379), 418.26 MiB | 14.44 MiB/s, done.
Resolving deltas: 100% (618447/618447), done.
Updating files: 100% (12370/12370), done.

cedricvanrompay-datadog avatar Jun 17 '24 11:06 cedricvanrompay-datadog