Merge pull request #15 from step-security/codeql

Address Codeql issues
step-security · Nov 20, 2021 · 7206db2 · 7206db2
2 parents 6824482 + d5d19fb
commit 7206db2
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 7 deletions.
diff --git a/dist/pre/index.js b/dist/pre/index.js
diff --git a/dist/pre/index.js.map b/dist/pre/index.js.map
diff --git a/src/setup.ts b/src/setup.ts
@@ -46,14 +46,20 @@ import { v4 as uuidv4 } from "uuid";
             console.log(
               `View security insights and recommended policy at ${web_url}/github/${process.env["GITHUB_REPOSITORY"]}/actions/runs/${process.env["GITHUB_RUN_ID"]} after the run has finished`
             );
-            cp.execSync(`cp ${__dirname}/agent /home/agent/agent`);
+            let cmd = "cp",
+              args = [path.join(__dirname, "agent"), "/home/agent/agent"];
+            cp.execFileSync(cmd, args);
             cp.execSync("chmod +x /home/agent/agent");
 
             fs.writeFileSync("/home/agent/agent.json", confgStr);
 
-            cp.execSync(
-              `sudo cp ${__dirname}/agent.service /etc/systemd/system/agent.service`
-            );
+            cmd = "sudo";
+            args = [
+              "cp",
+              path.join(__dirname, "agent.service"),
+              "/etc/systemd/system/agent.service",
+            ];
+            cp.execFileSync(cmd, args);
             cp.execSync("sudo systemctl daemon-reload");
             cp.execSync("sudo service agent start", { timeout: 15000 });