Affected by GO-2022-0395 and 4 other vulnerabilities

GO-2022-0395: GitHub CLI can execute a git binary from the current directory in github.com/cli/cli

GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

The highest tagged major version is v2.

command

package

v0.6.2 Latest Latest Go to latest Published: Mar 18, 2020 License: MIT Imports: 27 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cli/cli

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func BasicClient() (*api.Client, error)
type Action
type CmdStubber
- func (cs *CmdStubber) Stub(desiredOutput string)
type FlagError
- func (fe FlagError) Error() string
- func (fe FlagError) Unwrap() error
type QuestionStub

Constants ¶

This section is empty.

Variables ¶

View Source

var BuildDate = "" // YYYY-MM-DD

BuildDate is dynamically set at build time in the Makefile.

View Source

var Confirm = func(prompt string, result *bool) error {
	p := &survey.Confirm{
		Message: prompt,
		Default: true,
	}
	return survey.AskOne(p, result)
}

View Source

var RootCmd = &cobra.Command{
	Use:   "gh",
	Short: "GitHub CLI",
	Long: `Work seamlessly with GitHub from the command line.

GitHub CLI is in early stages of development, and we'd love to hear your
feedback at <https://forms.gle/umxd3h31c7aMQFKG7>`,

	SilenceErrors: true,
	SilenceUsage:  true,
}

RootCmd is the entry point of command-line execution

View Source

var Since = func(t time.Time) time.Duration {
	return time.Since(t)
}

View Source

var SurveyAsk = func(qs []*survey.Question, response interface{}, opts ...survey.AskOpt) error {
	return survey.Ask(qs, response, opts...)
}

View Source

var Version = "DEV"

Version is dynamically set by the toolchain or overridden by the Makefile.

Functions ¶

func BasicClient ¶

func BasicClient() (*api.Client, error)

BasicClient returns an API client that borrows from but does not depend on user configuration

Types ¶

type Action ¶

type Action int

const (
	PreviewAction Action = iota
	SubmitAction
	CancelAction
)

type CmdStubber ¶ added in v0.6.2

type CmdStubber struct {
	Stubs []*test.OutputStub
	Count int
	Calls []*exec.Cmd
}

TODO this is split between here and test/helpers.go. I did that because otherwise our test package would have to import utils (for utils.Runnable) which felt wrong. while utils_test currently doesn't import test helpers, i don't see why that ought to be precluded. I'm wondering if this is a case for having a global package just for storing Interfaces.

func (*CmdStubber) Stub ¶ added in v0.6.2

func (cs *CmdStubber) Stub(desiredOutput string)

type FlagError ¶

type FlagError struct {
	Err error
}

FlagError is the kind of error raised in flag processing

func (FlagError) Error ¶

func (fe FlagError) Error() string

func (FlagError) Unwrap ¶

func (fe FlagError) Unwrap() error

type QuestionStub ¶ added in v0.6.2

type QuestionStub struct {
	Name    string
	Value   interface{}
	Default bool
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL