Affected by GO-2024-2582 and 3 other vulnerabilities

GO-2024-2582: Minder trusts client-provided mapping from repo name to upstream ID in github.com/stacklok/minder

GO-2024-2871: Stacklok Minder vulnerable to denial of service from maliciously crafted templates in github.com/stacklok/minder

GO-2024-2885: Denial of service of Minder Server from maliciously crafted GitHub attestations in github.com/stacklok/minder

GO-2024-2934: Minder affected by denial of service from maliciously configured Git repository in github.com/stacklok/minder

git

package

v0.0.49 Latest Latest Go to latest Published: May 16, 2024 License: Apache-2.0 Imports: 10 Imported by: 0

Details

Package git provides a client for interacting with Git providers

This section is empty.

This section is empty.

This section is empty.

type Git struct {
	// contains filtered or unexported fields
}

Git is the struct that contains the GitHub REST API client

func NewGit(token provifv1.GitCredential) *Git

NewGit creates a new GitHub client

func (_ *Git) CanImplement(trait minderv1.ProviderType) bool

CanImplement returns true/false depending on whether the Provider can implement the specified trait

func (g *Git) Clone(ctx context.Context, url, branch string) (*git.Repository, error)

Clone clones a git repository