Affected by GO-2026-4858 and 2 other vulnerabilities

GO-2026-4858: BuildKit's Malicious frontend can cause file escape outside of storage root in github.com/moby/buildkit

GO-2026-4859: BuildKit Git URL subdir component can cause access to restricted files in github.com/moby/buildkit

GO-2026-6255: BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit

http

package

v0.26.3 Latest Latest Go to latest Published: Dec 16, 2025 License: Apache-2.0 Imports: 34 Imported by: 154

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/moby/buildkit

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type HTTPIdentifier
- func NewHTTPIdentifier(str string, tls bool) (*HTTPIdentifier, error)
- func (id *HTTPIdentifier) Capture(c *provenance.Capture, pin string) error
- func (id *HTTPIdentifier) Scheme() string
type HeaderField
type Metadata
type Opt
type Source
- func NewSource(opt Opt) (*Source, error)

Constants ¶

View Source

const (
	HTTPAuthHeaderSecretPrefix = "HTTP_AUTH_HEADER_"
	HTTPAuthTokenSecretPrefix  = "HTTP_AUTH_TOKEN_"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type HTTPIdentifier ¶ added in v0.13.0

type HTTPIdentifier struct {
	TLS              bool
	URL              string
	Checksum         digest.Digest
	Filename         string
	Perm             int
	UID              int
	GID              int
	AuthHeaderSecret string
	Header           []HeaderField
}

func NewHTTPIdentifier ¶ added in v0.13.0

func NewHTTPIdentifier(str string, tls bool) (*HTTPIdentifier, error)

func (*HTTPIdentifier) Capture ¶ added in v0.13.0

func (id *HTTPIdentifier) Capture(c *provenance.Capture, pin string) error

func (*HTTPIdentifier) Scheme ¶ added in v0.13.0

func (id *HTTPIdentifier) Scheme() string

type HeaderField ¶ added in v0.21.0

type HeaderField struct {
	Name  string
	Value string
}

type Metadata ¶ added in v0.26.0

type Metadata struct {
	Digest       digest.Digest
	Filename     string
	LastModified *time.Time
}

type Opt ¶

type Opt struct {
	CacheAccessor cache.Accessor
	Transport     http.RoundTripper
}

type Source ¶ added in v0.26.0

type Source struct {
	// contains filtered or unexported fields
}

func NewSource ¶

func NewSource(opt Opt) (*Source, error)

func (*Source) Identifier ¶ added in v0.26.0

func (hs *Source) Identifier(scheme, ref string, attrs map[string]string, platform *pb.Platform) (source.Identifier, error)

func (*Source) Resolve ¶ added in v0.26.0

func (hs *Source) Resolve(ctx context.Context, id source.Identifier, sm *session.Manager, _ solver.Vertex) (source.SourceInstance, error)

func (*Source) ResolveMetadata ¶ added in v0.26.0

func (hs *Source) ResolveMetadata(ctx context.Context, id *HTTPIdentifier, sm *session.Manager, jobCtx solver.JobContext) (*Metadata, error)

func (*Source) Schemes ¶ added in v0.26.0

func (hs *Source) Schemes() []string

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL