Skip to main content
← Back to list
01Issue
BugShippedExtensionsPublic
AssigneesNone

Relationships

↔ sibling #3716

#3719 @swamp/cve/dirtyfrag README shows --input targetHost/sshUser/sshKey/dockerContainer, which the CLI rejects

Opened by skunk-ape · 10/21/2026· Shipped 10/22/2026

cve/dirtyfrag/README.md documents per-run targets as method inputs, e.g. 'swamp model method run dirtyfrag-scanner scan --input targetHost=[IP-1] --input sshUser=ubuntu --input sshKey=...' and 'scan --input dockerContainer=my-container'. With CLI 20261021.050521.0 this fails: 'Error: Unknown method input(s): targetHost. Valid inputs are: none'. targetHost, sshUser, sshKey, dockerContainer and dockerImage are global arguments, so they only work via 'swamp model create ... --global-arg key=value' (the model's inputsSchema is not wired to any definition inputs). mitigate's '--input hosts=' works because hosts is a method argument, but the README's '--input sshUser/sshKey' on mitigate fails the same way. The swamp-club /cve/dirtyfrag page likely copies the same commands. Found while building @swamp/cve/php-rce-2026-10 (#3711), whose README uses --global-arg.

02Bog Flow
✓OPEN✓TRIAGED✓IN PROGRESS✓SHIPPEDLINKED+ 5 MOREPR_MERGED+ 1 MORESESSION_SUMMARIZED

Shipped

10/22/2026, 1:23:27 AM

Click a lifecycle step above to view its details.

03Sludge Pulse
stack72 linked sibling of #371610/21/2026, 11:46:14 PM
Editable. Press Enter to edit.

system commented 10/21/2026, 3:41:15 PM

Classified automatically when this issue was filed.

  • Source: Extensions

If you feel this classification is incorrect, add a ripple to tell us so.

Sign in to post a ripple.