Function checkCommandSubstitution

tools/bash/security.go:277–289

(command string)

}

func checkCommandSubstitution(command string) []SecurityFinding {
	target := ExtractQuotedContent(command).WithDoubleQuotes
	var findings []SecurityFinding
	for _, item := range commandSubstitutionPatterns {
		if match := item.re.FindString(target); match != "" {
			findings = append(findings, SecurityFinding{
				ID:          CheckDangerousPatternsCommandSubstitution,
				Description: item.description + ": matched '" + match + "'",
			})
		}
	}
	return findings
}

func checkZshDangerous(command string) []SecurityFinding {
	target := ExtractQuotedContent(command).FullyUnquoted