diff --git a/checkov/circleci_pipelines/common/shell_injection_list.py b/checkov/circleci_pipelines/common/shell_injection_list.py index 12b8119bde3..30b2a85d4d7 100644 --- a/checkov/circleci_pipelines/common/shell_injection_list.py +++ b/checkov/circleci_pipelines/common/shell_injection_list.py @@ -1,8 +1,8 @@ # flake8: noqa terms = [ - "\$*CIRCLE_PR_REPONAME*", - "\$*CIRCLE_PR_USERNAME*", - "\$*CIRCLE_PULL_REQUESTS*", - "\$*CIRCLE_TAG*", - "\$*CIRCLE_BRANCH*" + r"\$*CIRCLE_PR_REPONAME*", + r"\$*CIRCLE_PR_USERNAME*", + r"\$*CIRCLE_PULL_REQUESTS*", + r"\$*CIRCLE_TAG*", + r"\$*CIRCLE_BRANCH*" ] diff --git a/checkov/github_actions/common/shell_injection_list.py b/checkov/github_actions/common/shell_injection_list.py index 20f037d87a4..84e7d24ef33 100644 --- a/checkov/github_actions/common/shell_injection_list.py +++ b/checkov/github_actions/common/shell_injection_list.py @@ -1,20 +1,20 @@ # flake8: noqa terms = [ - "\${{[ ]*github.event.issue.title[ ]*}}", - "\${{[ ]*github.event.issue.body[ ]*}}", - "\${{[ ]*github.event.pull_request.title[ ]*}}", - "\${{[ ]*github.event.pull_request.body[ ]*}}", - "\${{[ ]*github.event.comment.body[ ]*}}", - "\${{[ ]*github.event.review.body[ ]*}}", - "\${{[ ]*github.event.review_comment.body[ ]*}}", - "\${{[ ]*github.event.pages.*.page_name[ ]*}}", - "\${{[ ]*github.event.head_commit.message[ ]*}}", - "\${{[ ]*github.event.head_commit.author.email[ ]*}}", - "\${{[ ]*github.event.head_commit.author.name[ ]*}}", - "\${{[ ]*github.event.commits.*.author.email[ ]*}}", - "\${{[ ]*github.event.commits.*.author.name[ ]*}}", - "\${{[ ]*github.event.pull_request.head.ref[ ]*}}", - "\${{[ ]*github.event.pull_request.head.label[ ]*}}", - "\${{[ ]*github.event.pull_request.head.repo.default_branch[ ]*}}", - "\${{[ ]*github.head_ref[ ]*}}" + r"\${{[ ]*github.event.issue.title[ ]*}}", + r"\${{[ ]*github.event.issue.body[ ]*}}", + r"\${{[ ]*github.event.pull_request.title[ ]*}}", + r"\${{[ ]*github.event.pull_request.body[ ]*}}", + r"\${{[ ]*github.event.comment.body[ ]*}}", + r"\${{[ ]*github.event.review.body[ ]*}}", + r"\${{[ ]*github.event.review_comment.body[ ]*}}", + r"\${{[ ]*github.event.pages.*.page_name[ ]*}}", + r"\${{[ ]*github.event.head_commit.message[ ]*}}", + r"\${{[ ]*github.event.head_commit.author.email[ ]*}}", + r"\${{[ ]*github.event.head_commit.author.name[ ]*}}", + r"\${{[ ]*github.event.commits.*.author.email[ ]*}}", + r"\${{[ ]*github.event.commits.*.author.name[ ]*}}", + r"\${{[ ]*github.event.pull_request.head.ref[ ]*}}", + r"\${{[ ]*github.event.pull_request.head.label[ ]*}}", + r"\${{[ ]*github.event.pull_request.head.repo.default_branch[ ]*}}", + r"\${{[ ]*github.head_ref[ ]*}}" ]