From 8f76dd0f26652f4fb2207c6f10113a7137efcae3 Mon Sep 17 00:00:00 2001 From: evanchia Date: Thu, 22 Apr 2021 14:30:15 -0700 Subject: [PATCH] Fixing string interpolation security risk in test metrics --- scripts/build/Jenkins/Jenkinsfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/build/Jenkins/Jenkinsfile b/scripts/build/Jenkins/Jenkinsfile index 4352cb1e6a..8c0c46e7c6 100644 --- a/scripts/build/Jenkins/Jenkinsfile +++ b/scripts/build/Jenkins/Jenkinsfile @@ -361,7 +361,7 @@ def TestMetrics(Map options, String workspace, String branchName, String repoNam ] withCredentials([usernamePassword(credentialsId: "${env.SERVICE_USER}", passwordVariable: 'apitoken', usernameVariable: 'username')]) { def command = "${options.PYTHON_DIR}/python.cmd -u mars/scripts/python/ctest_test_metric_scraper.py " + - "-e jenkins.creds.user ${username} -e jenkins.creds.pass ${apitoken} " + + '-e jenkins.creds.user $username -e jenkins.creds.pass $apitoken ' + "-e jenkins.base_url ${env.JENKINS_URL} " + "${cmakeBuildDir} ${branchName} %BUILD_NUMBER% AR ${configuration} ${repoName} " bat label: "Publishing ${buildJobName} Test Metrics",