3 ms·
What if someone peppers their malicious script with `# shellcheck disable=` pragmas?
by alganet 1y ago
What if someone peppers their malicious script with `# shellcheck disable=` pragmas?
- a10r 1y agoGreat point. A malicious actor could definitely do that. That’s why vet’s model doesn’t rely solely on ShellCheck—it’s just one layer. The key layer here is the diff. Even if the linter is silenced, the diff reveals any new suspicious # shellcheck disable= lines added to trusted scripts. That change alone is a red flag.