Affected by GO-2025-3455 and 3 other vulnerabilities

GO-2025-3455: Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast

GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast

GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast

GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast

cmd

package

v0.7.2 Latest Latest Go to latest Published: Jul 2, 2024 License: AGPL-3.0 Imports: 46 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/edgelesssys/contrast

Links

Open Source Insights

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

View Source

var (

	// DefaultCoordinatorPolicyHash is derived from the coordinator release candidate and injected at release build time.
	//
	// It is intentionally left empty for dev builds.
	DefaultCoordinatorPolicyHash = ""
)

Functions ¶

func NewGenerateCmd ¶

func NewGenerateCmd() *cobra.Command

NewGenerateCmd creates the contrast generate subcommand.

func NewRuntimeCmd ¶

func NewRuntimeCmd() *cobra.Command

NewRuntimeCmd creates the contrast runtime subcommand.

func NewSetCmd ¶

func NewSetCmd() *cobra.Command

NewSetCmd creates the contrast set subcommand.

func NewVerifyCmd ¶

func NewVerifyCmd() *cobra.Command

NewVerifyCmd creates the contrast verify subcommand.

Types ¶

This section is empty.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL