runner

Oct 28, 2026

Changes in this version

+ const ContainerOptionsPolicyAllow

+ const ContainerOptionsPolicyAuto

+ const ContainerOptionsPolicyRestrict

type Config

+ ContainerOptionsPolicy string

Oct 28, 2026

Changes in this version

type Config

+ ArtifactServerAuthKey []byte

Mar 23, 2026 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 1, 2026 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jul 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ConcurrentJobs int

+ func (config *Config) GetConcurrentJobs() int

May 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Apr 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type RunContext

+ Cancelled bool

Mar 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 10, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 8, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 1, 2025 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type RunContext

+ func (rc *RunContext) NewStepExpressionEvaluatorExt(ctx context.Context, step step, rcInputs bool) ExpressionEvaluator

Oct 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 10, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type RunContext

+ func (rc *RunContext) GetNodeToolFullPath(ctx context.Context) string

+ func (rc *RunContext) InitializeNodeTool() common.Executor

Jul 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ type GitFileInfo struct

+ func (g *GitFileInfo) IsDir() bool

+ func (g *GitFileInfo) ModTime() time.Time

+ func (g *GitFileInfo) Mode() fs.FileMode

+ func (g *GitFileInfo) Name() string

+ func (g *GitFileInfo) Size() int64

+ func (g *GitFileInfo) Sys() any

May 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Apr 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Mar 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ type GoGitActionCacheOfflineMode struct

+ Parent GoGitActionCache

+ func (c GoGitActionCacheOfflineMode) Fetch(ctx context.Context, cacheDir, url, ref, token string) (string, error)

+ func (c GoGitActionCacheOfflineMode) GetTarArchive(ctx context.Context, cacheDir, sha, includePrefix string) (io.ReadCloser, error)

+ type LocalRepositoryCache struct

+ CacheDirCache map[string]string

+ LocalRepositories map[string]string

+ Parent ActionCache

+ func (l *LocalRepositoryCache) Fetch(ctx context.Context, cacheDir, url, ref, token string) (string, error)

+ func (l *LocalRepositoryCache) GetTarArchive(ctx context.Context, cacheDir, sha, includePrefix string) (io.ReadCloser, error)

Feb 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ActionCache ActionCache

+ ActionOfflineMode bool

Jan 1, 2024 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 17, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Dec 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 14, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Nov 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ContainerNetworkMode docker_container.NetworkMode

type RunContext

+ ServiceContainers []container.ExecutionsEnvironment

+ func (rc *RunContext) GetServiceBindsAndMounts(svcVolumes []string) ([]string, map[string]string)

Oct 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 23, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ type ActionCache interface

+ Fetch func(ctx context.Context, cacheDir, url, ref, token string) (string, error)

+ GetTarArchive func(ctx context.Context, cacheDir, sha, includePrefix string) (io.ReadCloser, error)

+ type GoGitActionCache struct

+ Path string

+ func (c GoGitActionCache) Fetch(ctx context.Context, cacheDir, url, ref, token string) (string, error)

+ func (c GoGitActionCache) GetTarArchive(ctx context.Context, cacheDir, sha, includePrefix string) (io.ReadCloser, error)

Aug 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ LogPrefixJobID bool

Jul 10, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jul 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ActionCacheDir string

+ Vars map[string]string

Jun 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

May 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Apr 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ Matrix map[string]map[string]bool

type RunContext

+ func (rc *RunContext) IsHostEnv(ctx context.Context) bool

Mar 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type RunContext

+ GlobalEnv map[string]string

Feb 2, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 1, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2026-4890 +1 more

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 16, 2023 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ArtifactServerAddr string

+ Inputs map[string]string

Dec 26, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ func WithJobLoggerFactory(ctx context.Context, factory JobLoggerFactory) context.Context

type Config

+ ContainerOptions string

+ type JobLoggerFactory interface

+ WithJobLogger func() *logrus.Logger

type RunContext

+ IntraActionState map[string]map[string]string

+ func (rc *RunContext) ApplyExtraPath(env *map[string]string)

+ func (rc *RunContext) NewExpressionEvaluatorWithEnv(ctx context.Context, env map[string]string) ExpressionEvaluator

+ func (rc *RunContext) UpdateExtraPath(ctx context.Context, githubEnvPath string) error

type Runner

+ func NewReusableWorkflowRunner(rc *RunContext) (Runner, error)

Nov 28, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 31, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 29, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 31, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jul 29, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ func WithCompositeStepLogger(ctx context.Context, stepID string) context.Context

Jun 30, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jun 21, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ReplaceGheActionTokenWithGithubCom string

+ ReplaceGheActionWithGithubCom []string

Jun 20, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ var ContainerNewContainer = container.NewContainer

+ func Masks(ctx context.Context) *[]string

+ func WithCompositeLogger(ctx context.Context, masks *[]string) context.Context

+ func WithMasks(ctx context.Context, masks *[]string) context.Context

type Config

+ RemoteName string

+ Token string

Mar 22, 2022 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ func EvalBool(evaluator ExpressionEvaluator, expr string) (bool, error)

+ type ActionReader interface

type Config

+ CompositeRestrictions *model.CompositeRestrictions

+ JSONLogger bool

+ NoSkipCheckout bool

type ExpressionEvaluator

+ EvaluateYamlNode func(node *yaml.Node) error

type RunContext

+ ActionPath string

+ ActionRef string

+ ActionRepository string

+ Composite *model.Action

+ Inputs map[string]interface{}

+ Masks []string

+ Parent *RunContext

+ func (rc *RunContext) AddMask(mask string)

+ func (rc *RunContext) Clone() *RunContext

+ func (rc *RunContext) CompositeExecutor() common.Executor

Nov 24, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ArtifactServerPath string

+ ArtifactServerPort string

+ ForceRebuild bool

Aug 3, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type StepContext

+ Needs *model.Job

Jun 10, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ const ActPath

type Config

+ AutoRemove bool

+ ContainerCapAdd []string

+ ContainerCapDrop []string

+ ContainerDaemonSocket string

May 6, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ GitHubInstance string

+ UseGitIgnore bool

+ func (config *Config) ContainerWorkdir() string

+ type MappableOutput struct

+ OutputName string

+ StepID string

type RunContext

+ JobName string

+ OutputMappings map[MappableOutput]MappableOutput

+ func (rc *RunContext) GetBindsAndMounts() ([]string, map[string]string)

Mar 30, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ ContainerArchitecture string

+ UsernsMode string

Feb 8, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 21, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Jan 12, 2021 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ InsecureSecrets bool

type ExpressionEvaluator

+ InterpolateWithStringCheck func(string) (string, bool)

Nov 8, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Oct 9, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Sep 2, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ DefaultBranch string

Aug 30, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Aug 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ Privileged bool

type ExpressionEvaluator

+ Rewrite func(string) string

Jun 23, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

May 20, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ Actor string

Apr 23, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ Env map[string]string

Mar 14, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Mar 6, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 28, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type RunContext

+ Name string

+ func (rc *RunContext) String() string

Feb 25, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 25, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Feb 25, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ BindWorkdir bool

type RunContext

+ JobContainer container.Container

+ func (rc *RunContext) ActionCacheDir() string

+ type StepContext struct

+ Action *model.Action

+ Cmd []string

+ Env map[string]string

+ RunContext *RunContext

+ Step *model.Step

+ func (sc *StepContext) Executor() common.Executor

+ func (sc *StepContext) NewExpressionEvaluator() ExpressionEvaluator

Feb 21, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

type Config

+ Platforms map[string]string

Feb 21, 2020 GO-2023-1504 +2 more

  GO-2023-1504: act vulnerable to arbitrary file upload in artifact server in github.com/nektos/act

  GO-2026-4890: act: actions/cache server allows malicious cache injection in github.com/nektos/act

  GO-2026-4891: act: Unrestricted set-env and add-path command processing enables environment injection in github.com/nektos/act

Changes in this version

+ func WithJobLogger(ctx context.Context, jobName string) context.Context

+ type Config struct

+ EventName string

+ EventPath string

+ ForcePull bool

+ LogOutput bool

+ ReuseContainers bool

+ Secrets map[string]string

+ Workdir string

+ type ExpressionEvaluator interface

+ Evaluate func(string) (string, error)

+ Interpolate func(string) string

+ type RunContext struct

+ Config *Config

+ CurrentStep string

+ Env map[string]string

+ EventJSON string

+ ExprEval ExpressionEvaluator

+ ExtraPath []string

+ Matrix map[string]interface{}

+ Run *model.Run

+ StepResults map[string]*stepResult

+ Tempdir string

+ func (rc *RunContext) Close(ctx context.Context) error

+ func (rc *RunContext) EvalBool(expr string) bool

+ func (rc *RunContext) Executor() common.Executor

+ func (rc *RunContext) GetEnv() map[string]string

+ func (rc *RunContext) NewExpressionEvaluator() ExpressionEvaluator

+ func (rc *RunContext) NewStepExpressionEvaluator(step *model.Step) ExpressionEvaluator

+ func (rc *RunContext) StepEnv(step *model.Step) map[string]string

+ type Runner interface

+ NewPlanExecutor func(plan *model.Plan) common.Executor

+ NewRunExecutor func(run *model.Run, matrix map[string]interface{}) common.Executor

+ func New(runnerConfig *Config) (Runner, error)