File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -2,6 +2,7 @@ name: PoC RCE Demonstration
22on :
33 pull_request :
44 branches : [ master ]
5+ workflow_dispatch :
56jobs :
67 build :
78 runs-on : ubuntu-latest
@@ -12,15 +13,17 @@ jobs:
1213 with :
1314 node-version : ' 12'
1415 - name : Install dependencies
15- run : npm install gulp@3.9.1 gulp-shell@0.8.0 gulp-zip@3.2.0 babel-register
16+ run : npm install gulp@3.9.1 gulp-shell@0.8.0 gulp-zip@3.2.0 babel-register run-sequence@1.2.3 gulp-concat@2.6.1
1617 - name : Debug environment
1718 run : |
1819 echo "Node version:"
1920 node --version
2021 echo "NPM packages:"
21- npm list gulp gulp-shell gulp-zip babel-register
22+ npm list gulp gulp-shell gulp-zip babel-register run-sequence gulp-concat
2223 echo "Package version:"
2324 node -p "require('./package.json').version"
25+ echo "Gulpfile snippet:"
26+ cat gulpfile.babel.js | grep pushCodeFiles -A10
2427 - name : Run vulnerable Gulp task
2528 run : |
2629 echo "Running gulp pushCodeFiles with version: $(node -p "require('./package.json').version")"
You can’t perform that action at this time.
0 commit comments