Affected by GO-2026-6263 and 1 other vulnerabilities

GO-2026-6263: Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code

GO-2026-6266: Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code

github

package

v0.14.0 Latest Latest Go to latest Published: Nov 18, 2022 License: Apache-2.0 Imports: 37 Imported by: 0

Documentation ¶

Index ¶

func ConfigureRepository(ctx context.Context, run *params.Run, req *http.Request, payload string, ...) (bool, bool, error)
type Provider
- func New() *Provider

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ConfigureRepository ¶ added in v0.13.0

func ConfigureRepository(ctx context.Context, run *params.Run, req *http.Request, payload string, logger *zap.SugaredLogger) (bool, bool, error)

Types ¶

type Provider ¶

type Provider struct {
	Client        *github.Client
	Logger        *zap.SugaredLogger
	Token, APIURL *string
	ApplicationID *int64

	Run *params.Run
	// contains filtered or unexported fields
}

func New ¶ added in v0.13.1

func New() *Provider

func (*Provider) CreateStatus ¶

func (v *Provider) CreateStatus(ctx context.Context, tekton versioned.Interface, runevent *info.Event, pacopts *info.PacOpts, statusOpts provider.StatusOpts) error

func (*Provider) Detect ¶

func (v *Provider) Detect(req *http.Request, payload string, logger *zap.SugaredLogger) (bool, bool, *zap.SugaredLogger, string, error)

Detect processes event and detect if it is a github event, whether to process or reject it returns (if is a GH event, whether to process or reject, error if any occurred)

func (*Provider) GetCommitInfo ¶

func (v *Provider) GetCommitInfo(ctx context.Context, runevent *info.Event) error

GetCommitInfo get info (url and title) on a commit in runevent, this needs to be run after sewebhook while we already matched a token.

func (*Provider) GetConfig ¶

func (v *Provider) GetConfig() *info.ProviderConfig

func (*Provider) GetFileInsideRepo ¶

func (v *Provider) GetFileInsideRepo(ctx context.Context, runevent *info.Event, path, target string) (string, error)

GetFileInsideRepo Get a file via Github API using the runinfo information, we branch is true, the user the branch as ref instead of the SHA TODO: merge GetFileInsideRepo amd GetTektonDir

func (*Provider) GetFiles ¶ added in v0.12.0

func (v *Provider) GetFiles(ctx context.Context, runevent *info.Event) ([]string, error)

GetFiles get a files from pull request

func (*Provider) GetStringPullRequestComment ¶

func (v *Provider) GetStringPullRequestComment(ctx context.Context, runevent *info.Event, reg string) ([]*github.IssueComment, error)

GetStringPullRequestComment return the comment if we find a regexp in one of the comments text of a pull request

func (*Provider) GetTaskURI ¶ added in v0.13.0

func (v *Provider) GetTaskURI(ctx context.Context, _ *params.Run, event *info.Event, uri string) (bool, string, error)

func (*Provider) GetTektonDir ¶

func (v *Provider) GetTektonDir(ctx context.Context, runevent *info.Event, path string) (string, error)

GetTektonDir Get all yaml files in tekton directory return as a single concated file

func (*Provider) InitAppClient ¶

func (v *Provider) InitAppClient(ctx context.Context, kube kubernetes.Interface, event *info.Event) error

func (*Provider) IsAllowed ¶

func (v *Provider) IsAllowed(ctx context.Context, event *info.Event) (bool, error)

func (*Provider) ParsePayload ¶

func (v *Provider) ParsePayload(ctx context.Context, run *params.Run, request *http.Request, payload string) (*info.Event, error)

func (*Provider) SetClient ¶

func (v *Provider) SetClient(ctx context.Context, run *params.Run, event *info.Event) error

func (*Provider) SetLogger ¶

func (v *Provider) SetLogger(logger *zap.SugaredLogger)

func (*Provider) Validate ¶

func (v *Provider) Validate(_ context.Context, _ *params.Run, event *info.Event) error

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL