Affected by GO-2022-0281
and 9 other vulnerabilities
GO-2022-0281 : Exposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman in github.com/containers/podman
GO-2022-0416 : Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman
GO-2022-1151 : Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman
GO-2023-1942 : Podman Symlink Vulnerability in github.com/containers/libpod
GO-2023-1962 : Podman Elevated Container Privileges in github.com/containers/podman
GO-2024-3042 : Podman vulnerable to memory-based denial of service in github.com/containers/podman
GO-2024-3169 : Improper Input Validation in Buildah and Podman in github.com/containers/buildah
GO-2025-3777 : Podman Improper Certificate Validation; machine missing TLS verification in github.com/containers/podman
GO-2025-3935 : podman kube play symlink traversal vulnerability in github.com/containers/podman
GO-2025-3961 : Podman Creates Temporary File with Insecure Permissions in github.com/containers/podman
The highest tagged major version is
v5 .
Discover Packages
github.com/containers/podman/v2
pkg
auth
package
Version:
v2.1.1
Opens a new window with list of versions in this module.
Published: Sep 25, 2020
License: Apache-2.0
Opens a new window with license information.
Imports: 11
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
XRegistryAuthHeader is the key to the encoded registry authentication
configuration in an http-request header.
GetCredentials extracts one or more DockerAuthConfigs from the request's
header. The header could specify a single-auth config in which case the
first return value is set. In case of a multi-auth header, the contents are
stored in a temporary auth file (2nd return value). Note that the auth file
should be removed after usage.
Header returns a map with the XRegistryAuthHeader set which can
conveniently be used in the http stack.
func RemoveAuthfile(authfile string )
RemoveAuthfile is a convenience function that is meant to be called in a
deferred statement. If non-empty, it removes the specified authfile and log
errors. It's meant to reduce boilerplate code at call sites of
`GetCredentials`.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.