guarddog
guarddog copied to clipboard
"failed to run rule repository_integrity_mismatch: Error while cloning repository authentication required but no callback set with github url https://github.com/grpc/grpc"
Example:
➜ guarddog git:(v1.10.0) poetry run guarddog pypi scan --version=1.56.0 grpcio-tools
Found 2 potentially malicious indicators in grpcio-tools
code-execution: found 2 source code matches
* This package is executing OS commands in the setup.py file at grpcio-tools-1.56.0/setup.py:91
cpp_test = subprocess.Popen([cxx, '-x', 'c++', '-std=c++14', '-'],
stdin=PIPE,
stdout=PIPE,
stderr=PIPE)
* This package is executing OS commands in the setup.py file at grpcio-tools-1.56.0/setup.py:100
cpp_test = subprocess.Popen(
[cxx, '-x', 'c++', '-std=c++14', '-', '-latomic'],
stdin=PIPE,
stdout=PIPE,
stderr=PIPE)
Some rules failed to run while scanning grpcio-tools:
* potentially_compromised_email_domain: failed to run rule potentially_compromised_email_domain: can't compare offset-naive and offset-aware datetimes
* repository_integrity_mismatch: failed to run rule repository_integrity_mismatch: Error while cloning repository authentication required but no callback set with github url https://github.com/grpc/grpc
I would say this is a bug from pygit2
because using git
I have no problem cloning this repository:
➜ /tmp git clone https://github.com/grpc/grpc
Cloning into 'grpc'...
remote: Enumerating objects: 771379, done.
remote: Counting objects: 100% (2673/2673), done.
remote: Compressing objects: 100% (1761/1761), done.
remote: Total 771379 (delta 1568), reused 1404 (delta 889), pack-reused 768706
Receiving objects: 100% (771379/771379), 418.26 MiB | 14.44 MiB/s, done.
Resolving deltas: 100% (618447/618447), done.
Updating files: 100% (12370/12370), done.