Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

registry

package

v1.85.5 Latest Latest Go to latest Published: Feb 9, 2024 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 18 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/gardener/gardener

Links

Open Source Insights

Documentation ¶

Index ¶

func CopyFile(fs afero.Afero, sourceFile, destinationFile string, permissions os.FileMode) error
type Extractor
- func NewExtractor() Extractor

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CopyFile ¶ added in v1.83.0

func CopyFile(fs afero.Afero, sourceFile, destinationFile string, permissions os.FileMode) error

CopyFile copies a source file to destination file and sets the given permissions.

Types ¶

type Extractor ¶

type Extractor interface {
	// CopyFromImage copies a file from a given image reference to the destination file.
	CopyFromImage(ctx context.Context, imageRef string, filePathInImage string, destination string, permissions os.FileMode) error
}

Extractor is an interface for extracting files from a container image.

func NewExtractor ¶

func NewExtractor() Extractor

NewExtractor creates a new instance of containerd extractor.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
fake

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL