GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

actions

package

v0.0.1 Latest Latest Go to latest Published: Jan 13, 2019 License: MIT Imports: 21 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type ActionRunner interface {
	RunAction(ctx context.Context, dryrun bool, action string) error
}

ActionRunner to run an action

type EventGrapher interface {
	GraphEvent(eventName string) ([][]string, error)
}

EventGrapher to list the actions

type EventLister interface {
	ListEvents() []string
}

EventLister to list the events

type EventRunner interface {
	RunEvent(ctx context.Context, dryrun bool, event string) error
}

EventRunner to run an event

type Workflows interface {
	EventGrapher
	EventLister
	ActionRunner
	EventRunner
	Close()
}

Workflows provides capabilities to work with the workflow file

func ParseWorkflows(workingDir string, workflowPath string) (Workflows, error)

ParseWorkflows will read in the set of actions from the workflow file