Skip to content

Conversation

@Iamrodos
Copy link
Contributor

The repository dictionary uses lowercase "private" key. Use .get() with the correct case to match the pattern used elsewhere in the codebase.

The bug only affects --all users since --security-advisories short-circuits before the key access.

Closes #481

The repository dictionary uses lowercase "private" key. Use .get() with
the correct case to match the pattern used elsewhere in the codebase.

The bug only affects --all users since --security-advisories short-circuits
before the key access.
@Iamrodos
Copy link
Contributor Author

I also verified its lowercase in the github API. The new check also matches the check done in the attachments code which is more resilient.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security advisory changes break --all --private

1 participant