model

Mar 23, 2026 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 1, 2026 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ const ActionRunsUsingNode24

type ActionRunsUsing

+ func (a ActionRunsUsing) IsComposite() bool

+ func (a ActionRunsUsing) IsDocker() bool

+ func (a ActionRunsUsing) IsNode() bool

Aug 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jul 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ type WorkflowStrict Workflow

+ func (w *WorkflowStrict) UnmarshalYAML(node *yaml.Node) error

Jun 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

May 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Apr 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Mar 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 10, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 8, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type GithubContext

+ RunAttempt string

type Step

+ WorkflowShell string

Sep 10, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Action

+ func (a *Action) UnmarshalYAML(node *yaml.Node) error

type Workflow

+ func (w *Workflow) UnmarshalYAML(node *yaml.Node) error

Aug 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type ActionRuns

+ PostEntrypoint string

+ PreEntrypoint string

Jul 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

May 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Apr 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Mar 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type WorkflowPlanner

+ func NewSingleWorkflowPlanner(name string, f io.Reader) (WorkflowPlanner, error)

Jan 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 17, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 14, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 23, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ const ActionRunsUsingNode20

Sep 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type JobType

+ const JobTypeInvalid

Jul 10, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jul 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

May 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ var OnDecodeNodeError = func(node yaml.Node, out interface{}, err error)

type GithubContext

+ APIURL string

+ GraphQLURL string

+ ServerURL string

Apr 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Mar 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type GithubContext

+ func (ghc *GithubContext) SetBaseAndHeadRef()

+ func (ghc *GithubContext) SetRef(ctx context.Context, defaultBranch string, repoPath string)

+ func (ghc *GithubContext) SetRefTypeAndName()

+ func (ghc *GithubContext) SetRepositoryAndOwner(ctx context.Context, githubInstance string, remoteName string, repoPath string)

+ func (ghc *GithubContext) SetSha(ctx context.Context, repoPath string)

+ type WorkflowCallResult struct

+ Outputs map[string]string

Feb 2, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 26, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Job

+ RawSecrets yaml.Node

+ With map[string]interface{}

+ func (j *Job) InheritSecrets() bool

+ func (j *Job) Secrets() map[string]string

type Workflow

+ func (w *Workflow) WorkflowCallConfig() *WorkflowCall

+ type WorkflowCall struct

+ Inputs map[string]WorkflowCallInput

+ Outputs map[string]WorkflowCallOutput

+ type WorkflowCallInput struct

+ Default string

+ Description string

+ Required bool

+ Type string

+ type WorkflowCallOutput struct

+ Description string

+ Value string

Nov 28, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Job

+ func (j *Job) Type() JobType

+ type JobType int

+ const JobTypeDefault

+ const JobTypeReusableWorkflowLocal

+ const JobTypeReusableWorkflowRemote

+ func (j JobType) String() string

type StepType

+ const StepTypeReusableWorkflowLocal

+ const StepTypeReusableWorkflowRemote

Oct 31, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type StepType

+ func (s StepType) String() string

type Workflow

+ func (w *Workflow) OnEvent(event string) interface{}

+ func (w *Workflow) WorkflowDispatchConfig() *WorkflowDispatch

+ type WorkflowDispatch struct

+ Inputs map[string]WorkflowDispatchInput

+ type WorkflowDispatchInput struct

+ Default string

+ Description string

+ Options []string

+ Required bool

+ Type string

Sep 29, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Step

+ RawContinueOnError string

type WorkflowPlanner

+ PlanAll func() *Plan

Aug 31, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jul 29, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 30, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 21, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 20, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type ActionRuns

+ Post string

+ PostIf string

+ Pre string

+ PreIf string

type GithubContext

+ RefName string

+ RefType string

type Job

+ Uses string

type StepResult

+ State map[string]string

Mar 22, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ const ActionRunsUsingNode16

+ const StepStatusFailure

+ const StepStatusSkipped

+ const StepStatusSuccess

+ type CompositeRestrictions struct

+ AllowCompositeContinueOnError bool

+ AllowCompositeIf bool

+ AllowCompositeUses bool

type ContainerSpec

+ Credentials map[string]string

+ type GithubContext struct

+ Action string

+ ActionPath string

+ ActionRef string

+ ActionRepository string

+ Actor string

+ BaseRef string

+ Event map[string]interface{}

+ EventName string

+ EventPath string

+ HeadRef string

+ Job string

+ JobName string

+ Ref string

+ Repository string

+ RepositoryOwner string

+ RetentionDays string

+ RunID string

+ RunNumber string

+ RunnerPerflog string

+ RunnerTrackingID string

+ Sha string

+ Token string

+ Workflow string

+ Workspace string

+ func (ghc *GithubContext) SetRefAndSha(defaultBranch string, repoPath string)

type Job

+ Result string

+ type JobContext struct

+ Container struct{ ... }

+ Services map[string]struct{ ... }

+ Status string

+ type StepResult struct

+ Conclusion stepStatus

+ Outcome stepStatus

+ Outputs map[string]string

Nov 24, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Strategy

+ FailFastString string

+ MaxParallelString string

+ RawMatrix yaml.Node

+ func (s Strategy) GetFailFast() bool

+ func (s Strategy) GetMaxParallel() int

type Workflow

+ File string

Aug 3, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Job

+ Outputs map[string]string

Jun 10, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Job

+ func (j *Job) Environment() map[string]string

+ func (j *Job) Matrix() map[string][]interface{}

type Step

+ func (s *Step) Environment() map[string]string

May 6, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ const ActionRunsUsingComposite

+ func FixIfStatement(content []byte, wr *Workflow) error

+ func FixIfStatement1(val string, lines [][][]byte, l int) (string, error)

type ActionRuns

+ Steps []Step

type Output

+ Value string

type Step

+ func (s *Step) Validate() error

type StepType

+ const StepTypeInvalid

+ type WorkflowFiles struct

Mar 30, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ type ActionRuns struct

+ Args []string

+ Entrypoint []string

+ Env map[string]string

+ Image string

+ Main string

+ Using ActionRunsUsing

Feb 8, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 21, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 12, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 8, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 9, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 2, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 30, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ type Defaults struct

+ Run RunDefaults

type Job

+ Defaults Defaults

+ type RunDefaults struct

+ Shell string

+ WorkingDirectory string

type Workflow

+ Defaults Defaults

Jun 23, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

May 20, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type ActionRunsUsing

+ func (a *ActionRunsUsing) UnmarshalYAML(unmarshal func(interface{}) error) error

Apr 23, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Job

+ RawRunsOn yaml.Node

Mar 14, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Mar 6, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 25, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 25, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Job

+ RawContainer yaml.Node

Feb 25, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type ContainerSpec

+ Reuse bool

type Job

+ func (j *Job) GetMatrixes() []map[string]interface{}

type Step

+ func (s *Step) ShellCommand() string

Feb 21, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 21, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ const ActionRunsUsingDocker

+ const ActionRunsUsingNode12

+ type Action struct

+ Author string

+ Branding struct{ ... }

+ Description string

+ Inputs map[string]Input

+ Name string

+ Outputs map[string]Output

+ Runs struct{ ... }

+ func ReadAction(in io.Reader) (*Action, error)

+ type ActionRunsUsing string

+ type ContainerSpec struct

+ Args string

+ Entrypoint string

+ Env map[string]string

+ Image string

+ Name string

+ Options string

+ Ports []int

+ Volumes []string

+ type Input struct

+ Default string

+ Description string

+ Required bool

+ type Job struct

+ Container *ContainerSpec

+ Env map[string]string

+ If string

+ Name string

+ RawNeeds yaml.Node

+ RunsOn string

+ Services map[string]*ContainerSpec

+ Steps []*Step

+ Strategy *Strategy

+ TimeoutMinutes int64

+ func (j *Job) Needs() []string

+ type Output struct

+ Description string

+ type Plan struct

+ Stages []*Stage

+ func (p *Plan) MaxRunNameLen() int

+ type Run struct

+ JobID string

+ Workflow *Workflow

+ func (r *Run) Job() *Job

+ func (r *Run) String() string

+ type Stage struct

+ Runs []*Run

+ func (s *Stage) GetJobIDs() []string

+ type Step struct

+ ContinueOnError bool

+ Env map[string]string

+ ID string

+ If string

+ Name string

+ Run string

+ Shell string

+ TimeoutMinutes int64

+ Uses string

+ With map[string]string

+ WorkingDirectory string

+ func (s *Step) GetEnv() map[string]string

+ func (s *Step) String() string

+ func (s *Step) Type() StepType

+ type StepType int

+ const StepTypeRun

+ const StepTypeUsesActionLocal

+ const StepTypeUsesActionRemote

+ const StepTypeUsesDockerURL

+ type Strategy struct

+ FailFast bool

+ Matrix map[string][]interface{}

+ MaxParallel int

+ type Workflow struct

+ Env map[string]string

+ Jobs map[string]*Job

+ Name string

+ RawOn yaml.Node

+ func ReadWorkflow(in io.Reader) (*Workflow, error)

+ func (w *Workflow) GetJob(jobID string) *Job

+ func (w *Workflow) GetJobIDs() []string

+ func (w *Workflow) On() []string

+ type WorkflowPlanner interface

+ GetEvents func() []string

+ PlanEvent func(eventName string) *Plan

+ PlanJob func(jobName string) *Plan

+ func NewWorkflowPlanner(dirname string) (WorkflowPlanner, error)