From 7d47cb6e60af4f8e83d8f76ab2e5f2901d2e3110 Mon Sep 17 00:00:00 2001
From: Rhys Arkins <rhys@arkins.net>
Date: Mon, 11 May 2020 18:08:05 +0200
Subject: [PATCH] fix(gomod): quote cli args
---
lib/manager/gomod/artifacts.ts | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/lib/manager/gomod/artifacts.ts b/lib/manager/gomod/artifacts.ts
index bf905fdfc7..ae27390e95 100644
--- a/lib/manager/gomod/artifacts.ts
+++ b/lib/manager/gomod/artifacts.ts
@@ -1,4 +1,5 @@
import { ensureDir } from 'fs-extra';
+import { quote } from 'shlex';
import { dirname, join } from 'upath';
import { PLATFORM_TYPE_GITHUB } from '../../constants/platforms';
import { logger } from '../../logger';
@@ -16,9 +17,10 @@ function getPreCommands(): string[] | null {
});
let preCommands = null;
if (credentials && credentials.token) {
- const token = global.appMode
+ let token = global.appMode
? `x-access-token:${credentials.token}`
: credentials.token;
+ token = quote(token);
preCommands = [
`git config --global url.\"https://${token}@github.com/\".insteadOf \"https://github.com/\"`, // eslint-disable-line no-useless-escape
];
--
GitLab