GO-2026-5709: Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag in github.com/crossplane/crossplane

The highest tagged major version is v2.

upgrade

package

v1.20.13 Latest Latest Go to latest Published: Sep 14, 2026 License: Apache-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/crossplane/crossplane

Links

Documentation ¶

Overview ¶

Package upgrade contains commands that help users upgrade Crossplane.

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Cmd ¶

type Cmd struct {
	Check check.Cmd `cmd:"" help:"Check a control plane for features that are removed or broken in Crossplane v2."`
}

Cmd groups Crossplane upgrade related commands.

func (*Cmd) Help ¶

func (c *Cmd) Help() string

Help returns help for the upgrade command.

Source Files ¶

View all Source files

upgrade.go

Directories ¶

Path	Synopsis
check Package check implements the `crossplane beta upgrade check` command.	Package check implements the `crossplane beta upgrade check` command.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL