GO-2024-2472: Go package github.com/notaryproject/notation configured with permissive trust policies potentially susceptible to rollback attack from compromised registry

The highest tagged major version is v2.

trace

package

v1.1.0 Latest Latest Go to latest Published: Jan 25, 2024 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/notaryproject/notation

Links

Open Source Insights

Documentation ¶

Index ¶

func SetHTTPDebugLog(ctx context.Context, authClient *auth.Client)
func WithLoggerLevel(ctx context.Context, level logrus.Level) context.Context
type Transport
- func NewTransport(base http.RoundTripper) *Transport
- func (t *Transport) RoundTrip(req *http.Request) (resp *http.Response, err error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func SetHTTPDebugLog ¶ added in v1.1.0

func SetHTTPDebugLog(ctx context.Context, authClient *auth.Client)

SetHTTPDebugLog sets up http debug log with logrus.Logger

func WithLoggerLevel ¶

func WithLoggerLevel(ctx context.Context, level logrus.Level) context.Context

WithLoggerLevel returns a context with logrus log entry.

Types ¶

type Transport ¶

type Transport struct {
	http.RoundTripper
}

Transport is an http.RoundTripper that keeps track of the in-flight request and add hooks to report HTTP tracing events.

func NewTransport ¶

func NewTransport(base http.RoundTripper) *Transport

func (*Transport) RoundTrip ¶

func (t *Transport) RoundTrip(req *http.Request) (resp *http.Response, err error)

RoundTrip calls base roundtrip while keeping track of the current request.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL