keybase / keybase/keybase-issues

"keybase execute": replacement command for 'curl | sh'

Open
#1,685 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

I would really like to be able to tell someone to run the command

```
keybase execute glyph https://glyph.im/some-code.sh
```

to replace telling them to pipe the output of `curl` to the output of `sh`.

The present UI for doing this is insufficient, because `keybase verify` doesn't un-base-64 its input and `keybase decrypt` happily outputs unverified data before it ultimately fails, which doesn't help in the `|sh` pipeline.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the existing keybase verify and keybase decrypt command behavior described in the issue, then identify the command entry point for a new keybase execute operation. Done means a remote script can be decoded, verified, and executed without piping curl output directly to sh, while unverified data is not sent to the shell.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
cli
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.