fix: run sudo command only when both disable-sudo and disable-sudo-an…

[rohan-stepsecurity]

…d-dockers is true

[step-security-bot]

Please find StepSecurity AI-CodeWise code comments below.

Code Comments

src/cleanup.ts

[
    {
        "Severity": "High",
        "Recommendation": "Avoid using execSync() as it may lead to command injection vulnerabilities.",
        "Description": "The usage of cp.execSync() can expose the application to command injection vulnerabilities if user input or environment variables are not properly sanitized.",
        "Remediation": "Use child_process.spawnSync() with proper sanitization of input to prevent command injection attacks."
    },
    {
        "Severity": "Medium",
        "Recommendation": "Avoid hardcoded sensitive information in the code.",
        "Description": "Hardcoding sensitive information like 'sudo' command in the code can lead to security risks if the code is exposed or compromised.",
        "Remediation": "Store sensitive information like the sudo command in environment variables or secure configuration files."
    }
]

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.