Skip to content

Commit bd1021e

Browse files
angaduomclaude
andcommitted
fix(cve): use base64 -w 0 to prevent newline-broken auth headers
base64 wraps output at 76 characters by default, which injects newlines into the Authorization header when credentials are long enough. This causes curl error 43 ("bad argument") and HTTP 000 responses. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 2239b41 commit bd1021e

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

workflows/cve-fixer/.claude/commands/cve.find.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ Report: artifacts/cve-fixer/find/cve-issues-20260226-145018.md
5858

5959
```bash
6060
JIRA_BASE_URL="https://redhat.atlassian.net"
61-
AUTH=$(echo -n "${JIRA_EMAIL}:${JIRA_API_TOKEN}" | base64)
61+
AUTH=$(echo -n "${JIRA_EMAIL}:${JIRA_API_TOKEN}" | base64 -w 0)
6262

6363
# Retry once on network failure (curl exit code 000 = timeout/no response)
6464
for ATTEMPT in 1 2; do

workflows/cve-fixer/.claude/commands/cve.fix.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -527,7 +527,7 @@ This issue can be closed as 'Not a Bug / ${VEX_JUSTIFICATION}' if the above evid
527527
COMMENT_JSON=$(jq -n --arg body "$COMMENT_TEXT" '{"body": $body}')
528528
529529
# Post comment via Jira API
530-
AUTH=$(echo -n "${JIRA_EMAIL}:${JIRA_API_TOKEN}" | base64)
530+
AUTH=$(echo -n "${JIRA_EMAIL}:${JIRA_API_TOKEN}" | base64 -w 0)
531531
curl -s -X POST \
532532
-H "Authorization: Basic ${AUTH}" \
533533
-H "Content-Type: application/json" \

0 commit comments

Comments
 (0)