registry / @dataif/cli / 0.1.1

@dataif/cli@0.1.1

CLI para instalar e subir o DataIF localmente com Docker Compose.

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 51 file(s), 340 KB of source, external domains: chat.maritaca.ai, github.com, www.untitledui.com

Source & flagged code

11 flagged

templates/dataif/scripts/configure-env.shView file

Lines 75-115shell

76validate_metabase_password() {

77 local password="$1"

78 local normalized

80 normalized="$(printf '%s' "${password}" | tr '[:upper:]' '[:lower:]')"

81 if [ "${#password}" -lt 8 ]; then

82 return 1

83 fi

84 case "${normalized}" in

86 return 1

87 ;;

88 esac

89}

91read_metabase_admin_password() {

92 local password

94 while true; do

95 password="$(read_secret "Senha admin Metabase" "$(random_secret)")"

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/dataif/scripts/configure-env.shView on unpkg · L95

96 if validate_metabase_password "${password}"; then

97 printf '%s' "${password}"

98 return

99 fi

100 printf 'Senha admin Metabase fraca. Use ao menos 8 caracteres e evite valores comuns como admin, dataif ou password.\n' >&2

101 done

102}

103

104set_env() {

105 local key="$1"

106 local value="$2"

107 local tmp_file

108

109 tmp_file="$(mktemp)"

110 awk -v key="${key}" -v value="${value}" '

111 BEGIN { done = 0 }

112 $0 ~ "^" key "=" {

113 print key "=" value

114 done = 1

115 next

Lines 173-219shell

173

174set_env COMPOSE_PROJECT_NAME "$(read_value "Nome projeto Compose" "dataif")"

175set_env DATAIF_IMAGE_REGISTRY "${image_registry}"

176set_env DATAIF_IMAGE_TAG "${image_tag}"

177set_env WEB_PORT "${web_port}"

178set_env API_PORT "${api_port

200patternName = generic_password severity = medium line = 200 matchedText = metabase...rd)"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L200

201patternName = generic_password severity = medium line = 201 matchedText = keycloak...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L201

templates/dataif/infra/init-db/01-init-dataif.shView file

•path = templates/dataif/infra/init-db/01-init-dataif.sh kind = build_helper sizeBytes = 7425 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/dataif/infra/init-db/01-init-dataif.shView on unpkg

Source & flagged code

11 flagged · loading source

templates/dataif/scripts/configure-env.shView file

95patternName = generic_password severity = medium line = 95 matchedText = password...)")"

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/dataif/scripts/configure-env.shView on unpkg · L95

193patternName = generic_password severity = medium line = 193 matchedText = postgres...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L193

194patternName = generic_password severity = medium line = 194 matchedText = dataif_e...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L194

195patternName = generic_password severity = medium line = 195 matchedText = dataif_m...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L195

196patternName = generic_password severity = medium line = 196 matchedText = dataif_v...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L196

197patternName = generic_password severity = medium line = 197 matchedText = airflow_...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L197

198patternName = generic_password severity = medium line = 198 matchedText = metabase...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L198

199patternName = generic_password severity = medium line = 199 matchedText = airflow_...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L199

200patternName = generic_password severity = medium line = 200 matchedText = metabase...rd)"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L200

201patternName = generic_password severity = medium line = 201 matchedText = keycloak...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L201

templates/dataif/infra/init-db/01-init-dataif.shView file

•path = templates/dataif/infra/init-db/01-init-dataif.sh kind = build_helper sizeBytes = 7425 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/dataif/infra/init-db/01-init-dataif.shView on unpkg

Findings

14 Medium5 Low

MediumSecret Patterntemplates/dataif/scripts/configure-env.sh

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpertemplates/dataif/infra/init-db/01-init-dataif.sh

MediumStructural Risk Force Deep Review

MediumSecret Patterntemplates/dataif/scripts/configure-env.sh

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

11 flagged

templates/dataif/scripts/configure-env.shView file

Lines 75-115shell

76validate_metabase_password() {

77 local password="$1"

78 local normalized

80 normalized="$(printf '%s' "${password}" | tr '[:upper:]' '[:lower:]')"

81 if [ "${#password}" -lt 8 ]; then

82 return 1

83 fi

84 case "${normalized}" in

86 return 1

87 ;;

88 esac

89}

91read_metabase_admin_password() {

92 local password

94 while true; do

95 password="$(read_secret "Senha admin Metabase" "$(random_secret)")"

Medium

Secret Pattern

Package contains a possible secret pattern.

templates/dataif/scripts/configure-env.shView on unpkg · L95

96 if validate_metabase_password "${password}"; then

97 printf '%s' "${password}"

98 return

99 fi

100 printf 'Senha admin Metabase fraca. Use ao menos 8 caracteres e evite valores comuns como admin, dataif ou password.\n' >&2

101 done

102}

103

104set_env() {

105 local key="$1"

106 local value="$2"

107 local tmp_file

108

109 tmp_file="$(mktemp)"

110 awk -v key="${key}" -v value="${value}" '

111 BEGIN { done = 0 }

112 $0 ~ "^" key "=" {

113 print key "=" value

114 done = 1

115 next

Lines 173-219shell

173

174set_env COMPOSE_PROJECT_NAME "$(read_value "Nome projeto Compose" "dataif")"

175set_env DATAIF_IMAGE_REGISTRY "${image_registry}"

176set_env DATAIF_IMAGE_TAG "${image_tag}"

177set_env WEB_PORT "${web_port}"

178set_env API_PORT "${api_port

200patternName = generic_password severity = medium line = 200 matchedText = metabase...rd)"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L200

201patternName = generic_password severity = medium line = 201 matchedText = keycloak...)")"

Medium

Secret Pattern

Hardcoded password in templates/dataif/scripts/configure-env.sh

templates/dataif/scripts/configure-env.shView on unpkg · L201

templates/dataif/infra/init-db/01-init-dataif.shView file

•path = templates/dataif/infra/init-db/01-init-dataif.sh kind = build_helper sizeBytes = 7425 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

templates/dataif/infra/init-db/01-init-dataif.shView on unpkg