NVIDIA / holodeck / 21963089057

46%

main: 48%

push

github

fix(security): validate node labels and IPs before shell interpolation

User-controlled label keys/values from YAML config were directly
interpolated into kubectl commands via fmt.Sprintf, enabling command
injection. Add label validation against Kubernetes label pattern.
Also validate PrivateIP with net.ParseIP before grep interpolation.

Audit findings #17 (MEDIUM), #18 (MEDIUM).

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

0 of 5 new or added lines in 1 file covered. (0.0%)

2289 of 4988 relevant lines covered (45.89%)

0.51 hits per line