Affected by GO-2025-3767 and 1 other vulnerabilities

GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

codeserver

package

v0.2.0 Latest Latest Go to latest Published: Apr 23, 2025 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Package codeserver contains a detector for weak credentials in Code-Server https://github.com/coder/code-server/.

View Source

const (
	// Name of the detector.
	Name = "weakcredentials/codeserver"
)

This section is empty.

func New(cfg Config) detector.Detector

New returns a detector.

func NewDefault() detector.Detector

NewDefault returns a detector with the default config settings.

type Config struct {
	Remote        string
	ClientTimeout time.Duration
}

Config for this detector.

func DefaultConfig() Config

DefaultConfig returns the default config for this detector.

type Detector struct {
	// contains filtered or unexported fields
}

Detector is a SCALIBR Detector for weak/guessable passwords for the Code-Server service.

func (Detector) Name() string

Name of the detector.

func (Detector) RequiredExtractors() []string

RequiredExtractors returns an empty list as there are no dependencies.

func (Detector) Requirements() *plugin.Capabilities

Requirements of the detector.

func (d Detector) Scan(ctx context.Context, _ *scalibrfs.ScanRoot, _ *packageindex.PackageIndex) ([]*detector.Finding, error)

Scan starts the scan.

func (Detector) Version() int

Version of the detector.