execpath

func Resolve ¶

func Resolve(name string) (string, error)

Resolve finds an executable by name in fixed system directories only. It intentionally does not read PATH, avoiding writable-directory hijacks.

func ResolveInDirs ¶

func ResolveInDirs(name string, dirs []string) (string, error)

func ValidateAbsoluteExecutable ¶

func ValidateAbsoluteExecutable(path string) error

ValidateAbsoluteExecutable requires an explicit absolute path to a regular executable file. It is used for opt-in overrides where PATH lookup would reintroduce executable-hijacking risk.