hydra-queue-runner: Validate release name

2025-08-02 15:06:13 +02:00
parent 252801cea8
commit 9396846892
1 changed files with 3 additions and 2 deletions
--- a/src/hydra-queue-runner/build-result.cc
+++ b/src/hydra-queue-runner/build-result.cc
@@ -129,8 +129,9 @@ BuildOutput getBuildOutput(
        if (file == narMembers.end() ||
            file->second.type != SourceAccessor::Type::tRegular)
            continue;
-        res.releaseName = trim(file->second.contents.value());
-        // FIXME: validate release name
+        auto contents = trim(file->second.contents.value());
+        if (std::regex_match(contents, std::regex("[a-zA-Z0-9.@:_-]+")))
+            res.releaseName = contents;
    }

    /* Get metrics. */