Update docker-create.sh to fix env-var injection

OWASP · Dec 13, 2024 · 8951187 · 8951187
1 parent 8b110a8
commit 8951187
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/scripts/docker-create.sh b/.github/scripts/docker-create.sh
@@ -352,7 +352,7 @@ build_update_pom() {
 
 create_containers() {
     echo "Creating containers"
-    SECRET_VALUE="youCantHandleThisSecret"
+    export SECRET_VALUE="youCantHandleThisSecret"
     if [[ "$script_mode" == "publish" ]]; then
         docker buildx build --platform linux/amd64,linux/arm64 -t jeroenwillemsen/addo-example:$tag-no-vault --build-arg "$buildarg" --build-arg "PORT=8081" --build-arg "argBasedVersion=$tag" --build-arg "spring_profile=without-vault" --secret id=mysecret,env=SECRET_VALUE --push ./../../.
         docker buildx build --platform linux/amd64,linux/arm64 -t jeroenwillemsen/addo-example:latest-no-vault --build-arg "$buildarg" --build-arg "PORT=8081" --build-arg "argBasedVersion=$tag" --build-arg "spring_profile=without-vault" --secret id=mysecret,env=SECRET_VALUE --push ./../../.