Affected by GO-2025-3455 and 3 other vulnerabilities

GO-2025-3455: Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast

GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast

GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast

GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast

genpolicy

package

v1.1.1 Latest Latest Go to latest Published: Nov 13, 2024 License: AGPL-3.0 Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/edgelesssys/contrast

Links

Open Source Insights

Documentation ¶

Index ¶

type Config
- func NewConfig(platform platforms.Platform) *Config
type Runner
- func New(rulesPath, settingsPath, cachePath string, bin []byte) (*Runner, error)
- func (r *Runner) Run(ctx context.Context, yamlPath string, logger *slog.Logger) error
- func (r *Runner) Teardown() error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Config ¶

type Config struct {
	// Rules is a Rego module that verifies agent requests.
	Rules []byte
	// Settings is a json config file that holds platform-specific configuration.
	Settings []byte
	// Bin is the genpolicy binary.
	Bin []byte
}

Config contains configuration files for genpolicy.

func NewConfig ¶

func NewConfig(platform platforms.Platform) *Config

NewConfig selects the appropriate genpolicy configuration for the target platform.

type Runner ¶

type Runner struct {
	// contains filtered or unexported fields
}

Runner is a wrapper around the genpolicy tool.

Create an instance with New(), call Run() to execute the tool, and call Teardown() afterwards to clean up temporary files.

func New ¶

func New(rulesPath, settingsPath, cachePath string, bin []byte) (*Runner, error)

New creates a new Runner for the given configuration.

func (*Runner) Run ¶

func (r *Runner) Run(ctx context.Context, yamlPath string, logger *slog.Logger) error

Run runs the tool on the given yaml.

Run can be called more than once.

func (*Runner) Teardown ¶

func (r *Runner) Teardown() error

Teardown cleans up temporary files and should be called after the last Run.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL