microsoft/hve-core
Publicmirrored fromhttps://github.com/microsoft/hve-coreAvailable
scripts/tests/Fixtures/Security/insecure-download.sh
13lines · modecode
| 1 | #!/usr/bin/env bash |
| 2 | # Copyright (c) Microsoft Corporation. |
| 3 | # SPDX-License-Identifier: MIT |
| 4 | # |
| 5 | # Test fixture: Shell script with insecure download (no checksum) |
| 6 | |
| 7 | echo "Downloading tool without verification..." |
| 8 | curl -o /tmp/tool.tar.gz https://example.com/tool.tar.gz |
| 9 | |
| 10 | # This download lacks checksum verification |
| 11 | wget https://example.com/other-tool.zip -O /tmp/other-tool.zip |
| 12 | |
| 13 | echo "Done" |
| 14 | |