Affected by GO-2023-1829 and 2 other vulnerabilities

GO-2023-1829: Notation vulnerable to denial of service from high number of artifact signatures in github.com/notaryproject/notation

GO-2023-1831: Notation's default `maxSignatureAttempts` in `notation verify` enables an endless data attack in github.com/notaryproject/notation

GO-2024-2472: Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry

The highest tagged major version is v2.

errors

package

v1.0.0-rc.5 Latest Latest Go to latest Published: May 17, 2023 License: Apache-2.0 Imports: 0 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/notaryproject/notation

Links

Open Source Insights

Documentation ¶

Index ¶

type ErrorOCILayoutMissingReference
- func (e ErrorOCILayoutMissingReference) Error() string
type ErrorReferrersAPINotSupported
- func (e ErrorReferrersAPINotSupported) Error() string

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type ErrorOCILayoutMissingReference ¶

type ErrorOCILayoutMissingReference struct {
	Msg string
}

ErrorOCILayoutMissingReference is used when signing local content in oci layout folder but missing input tag or digest.

func (ErrorOCILayoutMissingReference) Error ¶

func (e ErrorOCILayoutMissingReference) Error() string

type ErrorReferrersAPINotSupported ¶

type ErrorReferrersAPINotSupported struct {
	Msg string
}

ErrorReferrersAPINotSupported is used when the target registry does not support the Referrers API

func (ErrorReferrersAPINotSupported) Error ¶

func (e ErrorReferrersAPINotSupported) Error() string

Source Files ¶

View all Source files

errors.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL