develop-component
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalyreferences/running-and-testing.md
LOWAnomalyLOW
references/running-and-testing.md
The code is operational documentation for a Keboola component and does not show clear malware. It contains legitimate but important security risks: publicly binding an optional debugger, exposing sensitive values through logs or environment variables, and using eval with generated Docker login output. These practices should be restricted to trusted local or CI environments, protected from external network access, and replaced with safer argument handling where possible.
Confidence: 97%Severity: 54%
Audit Metadata