initializer

May 14, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 21, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 23, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 22, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 5, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 22, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 24, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 20, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 3, 2026 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Dec 1, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 6, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 1, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 14, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 21, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 14, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 4, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 11, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 1, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 26, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 11, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 4, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 31, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 1, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 26, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 6, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Dec 17, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 29, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 5, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 31, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 20, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 26, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 8, 2025 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Dec 17, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 5, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 24, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 12, 2024 GO-2024-3219 +1 more

  GO-2024-3219: github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 28, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 20, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 7, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Dec 17, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 5, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 25, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 16, 2024 GO-2024-3219 +1 more

  GO-2024-3219: github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 20, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 16, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 7, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 6, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 24, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 16, 2024 GO-2024-3219 +1 more

  GO-2024-3219: github.com/crossplane/crossplane: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 20, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 14, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 9, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 14, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 15, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 7, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 26, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 15, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 10, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 14, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 13, 2024 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Dec 21, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Dec 11, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 22, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 21, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 14, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 1, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Changes in this version

+ const RootCACertSecretName

+ func DNSNamesForService(service, namespace string) []string

+ func DefaultDeploymentRuntimeConfig(ctx context.Context, kube client.Client) error

+ type StepFunc func(ctx context.Context, kube client.Client) error

+ func (f StepFunc) Run(ctx context.Context, kube client.Client) error

+ type TLSCertificateGenerator struct

+ func NewTLSCertificateGenerator(ns, caSecret string, opts ...TLSCertificateGeneratorOption) *TLSCertificateGenerator

+ func (e *TLSCertificateGenerator) Run(ctx context.Context, kube client.Client) error

+ type TLSCertificateGeneratorOption func(*TLSCertificateGenerator)

+ func TLSCertificateGeneratorWithClientSecretName(s string, subjects []string) TLSCertificateGeneratorOption

+ func TLSCertificateGeneratorWithLogger(log logging.Logger) TLSCertificateGeneratorOption

+ func TLSCertificateGeneratorWithOwner(owner []metav1.OwnerReference) TLSCertificateGeneratorOption

+ func TLSCertificateGeneratorWithServerSecretName(s string, dnsNames []string) TLSCertificateGeneratorOption

Oct 26, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 21, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 8, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 28, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Changes in this version

+ type CoreCRDsMigrator struct

+ func NewCoreCRDsMigrator(crdName, sourceVersion string) *CoreCRDsMigrator

+ func (c *CoreCRDsMigrator) Run(ctx context.Context, kube client.Client) error

Jul 25, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 25, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 25, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 7, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 28, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 25, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Changes in this version

+ const ESSCACertSecretName

+ const SecretKeyCACert

+ const SecretKeyTLSCert

+ const SecretKeyTLSKey

+ type CertGenerator struct

+ func NewCertGenerator() *CertGenerator

+ func (*CertGenerator) Generate(cert *x509.Certificate, signer *CertificateSigner) (key []byte, crt []byte, err error)

+ type CertificateSigner struct

+ type ESSCertificateGenerator struct

+ func NewESSCertificateGenerator(ns, clientSecret, serverSecret string, opts ...ESSCertificateGeneratorOption) *ESSCertificateGenerator

+ func (e *ESSCertificateGenerator) Run(ctx context.Context, kube client.Client) error

+ type ESSCertificateGeneratorOption func(*ESSCertificateGenerator)

+ func ESSCertificateGeneratorWithLogger(log logging.Logger) ESSCertificateGeneratorOption

type WebhookCertificateGeneratorOption

+ func WithWebhookCertificateGenerator(cg CertificateGenerator) WebhookCertificateGeneratorOption

Jan 31, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 25, 2023 GO-2026-5709

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 7, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 27, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 9, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 24, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 27, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 12, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 8, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 10, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 17, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 31, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 18, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 6, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 9, 2023 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 14, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jul 15, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 17, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 14, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 26, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 17, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 17, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 14, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 26, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 5, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 22, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Changes in this version

+ type CertificateGenerator interface

+ Generate func(domain ...string) (key []byte, crt []byte, err error)

type CoreCRDs

+ WebhookTLSSecretRef *types.NamespacedName

+ type CoreCRDsOption func(*CoreCRDs)

+ func WithFs(fs afero.Fs) CoreCRDsOption

+ func WithWebhookTLSSecretRef(nn types.NamespacedName) CoreCRDsOption

+ type RootCAGenerator struct

+ func NewRootCAGenerator() *RootCAGenerator

+ func (*RootCAGenerator) Generate(domains ...string) (key []byte, crt []byte, err error)

+ type StoreConfigObject struct

+ func NewStoreConfigObject(ns string) *StoreConfigObject

+ func (so *StoreConfigObject) Run(ctx context.Context, kube client.Client) error

+ type WebhookCertificateGenerator struct

+ SecretRef types.NamespacedName

+ ServiceNamespace string

+ func NewWebhookCertificateGenerator(nn types.NamespacedName, svcNamespace string, log logging.Logger, ...) *WebhookCertificateGenerator

+ func (wt *WebhookCertificateGenerator) Run(ctx context.Context, kube client.Client) error

+ type WebhookCertificateGeneratorOption func(*WebhookCertificateGenerator)

+ func WithCertificateGenerator(cg CertificateGenerator) WebhookCertificateGeneratorOption

+ type WebhookConfigurations struct

+ Path string

+ Scheme *runtime.Scheme

+ ServiceReference admv1.ServiceReference

+ TLSSecretRef types.NamespacedName

+ func NewWebhookConfigurations(path string, s *runtime.Scheme, tlsSecretRef types.NamespacedName, ...) *WebhookConfigurations

+ func (c *WebhookConfigurations) Run(ctx context.Context, kube client.Client) error

+ type WebhookConfigurationsOption func(*WebhookConfigurations)

+ func WithWebhookConfigurationsFs(fs afero.Fs) WebhookConfigurationsOption

Dec 14, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 26, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 5, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 1, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Mar 7, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 15, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 26, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 21, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 6, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jan 5, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 19, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 1, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 15, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 22, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 26, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 31, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Feb 15, 2022 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 22, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 25, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Sep 10, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 31, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 22, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Nov 22, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 25, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 23, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 29, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 26, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Oct 25, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Aug 23, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 15, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Jun 2, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

May 4, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Apr 27, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

Changes in this version

+ type CRDWaiter struct

+ Names []string

+ Period time.Duration

+ Timeout time.Duration

+ func NewCRDWaiter(names []string, timeout time.Duration, period time.Duration, ...) *CRDWaiter

+ func (cw *CRDWaiter) Run(ctx context.Context, kube client.Client) error

+ type CoreCRDs struct

+ Path string

+ Scheme *runtime.Scheme

+ func NewCoreCRDs(path string, s *runtime.Scheme) *CoreCRDs

+ func (c *CoreCRDs) Run(ctx context.Context, kube client.Client) error

+ type Initializer struct

+ func New(kube client.Client, steps ...Step) *Initializer

+ func (c *Initializer) Init(ctx context.Context) error

+ type LockObject struct

+ func NewLockObject() *LockObject

+ func (lo *LockObject) Run(ctx context.Context, kube client.Client) error

+ type PackageInstaller struct

+ Configurations []string

+ Providers []string

+ func NewPackageInstaller(p []string, c []string) *PackageInstaller

+ func (pi *PackageInstaller) Run(ctx context.Context, kube client.Client) error

+ type Step interface

+ Run func(ctx context.Context, kube client.Client) error

Apr 21, 2021 GO-2023-1979 +2 more

  GO-2023-1979: Denial of service from large image in github.com/crossplane/crossplane

  GO-2023-1980: Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane

  GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane