Affected by GO-2026-6263 and 1 other vulnerabilities

GO-2026-6263: Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code

GO-2026-6266: Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code

matcher

package

v0.27.5 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 29 Imported by: 0

Documentation ¶

Index ¶

func GetRepo(ctx context.Context, cs *params.Run, repoName string) (*apipac.Repository, error)
func IncomingWebhookRule(branch string, incomingWebhooks []apipac.Incoming) *apipac.Incoming
func MatchEventURLRepo(ctx context.Context, cs *params.Run, event *info.Event, ns string) (*apipac.Repository, error)
func MatchRunningPipelineRunForIncomingWebhook(eventType, incomingPipelineRun string, prs []*tektonv1.PipelineRun) []*tektonv1.PipelineRun
type Match
- func MatchPipelinerunByAnnotation(ctx context.Context, logger *zap.SugaredLogger, pruns []*tektonv1.PipelineRun, ...) ([]Match, error)
type RemoteTasks
- func (rt RemoteTasks) GetPipelineFromAnnotations(ctx context.Context, annotations map[string]string) (*tektonv1.Pipeline, error)
- func (rt RemoteTasks) GetTaskFromAnnotations(ctx context.Context, annotations map[string]string) ([]*tektonv1.Task, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GetRepo ¶

func GetRepo(ctx context.Context, cs *params.Run, repoName string) (*apipac.Repository, error)

GetRepo get a repo by name anywhere on a cluster.

func IncomingWebhookRule ¶

func IncomingWebhookRule(branch string, incomingWebhooks []apipac.Incoming) *apipac.Incoming

IncomingWebhookRule will match a rule to an incoming rule, currently a rule is a target branch.

func MatchEventURLRepo ¶

func MatchEventURLRepo(ctx context.Context, cs *params.Run, event *info.Event, ns string) (*apipac.Repository, error)

func MatchRunningPipelineRunForIncomingWebhook ¶ added in v0.21.0

func MatchRunningPipelineRunForIncomingWebhook(eventType, incomingPipelineRun string, prs []*tektonv1.PipelineRun) []*tektonv1.PipelineRun

Types ¶

type Match ¶

type Match struct {
	PipelineRun *tektonv1.PipelineRun
	Repo        *apipac.Repository
	Config      map[string]string
}

func MatchPipelinerunByAnnotation ¶

func MatchPipelinerunByAnnotation(ctx context.Context, logger *zap.SugaredLogger, pruns []*tektonv1.PipelineRun, cs *params.Run, event *info.Event, vcx provider.Interface) ([]Match, error)

type RemoteTasks ¶

type RemoteTasks struct {
	Run               *params.Run
	ProviderInterface provider.Interface
	Event             *info.Event
	Logger            *zap.SugaredLogger
}

func (RemoteTasks) GetPipelineFromAnnotations ¶ added in v0.13.0

func (rt RemoteTasks) GetPipelineFromAnnotations(ctx context.Context, annotations map[string]string) (*tektonv1.Pipeline, error)

GetPipelineFromAnnotations Get pipeline remotely if they are on Annotations TODO: merge in a generic between the two.

func (RemoteTasks) GetTaskFromAnnotations ¶

func (rt RemoteTasks) GetTaskFromAnnotations(ctx context.Context, annotations map[string]string) ([]*tektonv1.Task, error)

GetTaskFromAnnotations Get task remotely if they are on Annotations.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL