Affected by GO-2026-6263 and 1 other vulnerabilities

GO-2026-6263: Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code

GO-2026-6266: Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code

settings

package

v0.27.5 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 9 Imported by: 3

Documentation ¶

Index ¶

Constants
Variables
func ConvertPacStructToConfigMap(settings *Settings) map[string]string
func DefaultValidators() map[string]func(string) error
func SyncConfig(logger *zap.SugaredLogger, setting *Settings, config map[string]string, ...) error
type HubCatalog
type Settings
- func DefaultSettings() Settings
- func (s *Settings) DeepCopy(out *Settings)

Constants ¶

View Source

const (
	PACApplicationNameDefaultValue = "Pipelines as Code CI"

	HubURLKey                  = "hub-url"
	HubCatalogNameKey          = "hub-catalog-name"
	HubURLDefaultValue         = "https://api.hub.tekton.dev/v1"
	HubCatalogNameDefaultValue = "tekton"

	CustomConsoleNameKey         = "custom-console-name"
	CustomConsoleURLKey          = "custom-console-url"
	CustomConsolePRDetailKey     = "custom-console-url-pr-details"
	CustomConsolePRTaskLogKey    = "custom-console-url-pr-tasklog"
	CustomConsoleNamespaceURLKey = "custom-console-url-namespace"

	SecretGhAppTokenRepoScopedKey = "secret-github-app-token-scoped" //nolint: gosec
)

Variables ¶

View Source

var (
	TknBinaryName = `tkn`
	TknBinaryURL  = `https://tekton.dev/docs/cli/#installation`
)

Functions ¶

func ConvertPacStructToConfigMap ¶ added in v0.27.1

func ConvertPacStructToConfigMap(settings *Settings) map[string]string

func DefaultValidators ¶ added in v0.27.1

func DefaultValidators() map[string]func(string) error

func SyncConfig ¶ added in v0.26.0

func SyncConfig(logger *zap.SugaredLogger, setting *Settings, config map[string]string, validators map[string]func(string) error) error

Types ¶

type HubCatalog ¶ added in v0.20.0

type HubCatalog struct {
	Index string
	Name  string
	URL   string
}

type Settings ¶

type Settings struct {
	ApplicationName                    string `default:"Pipelines as Code CI" json:"application-name"`
	HubCatalogs                        *sync.Map
	RemoteTasks                        bool   `default:"true"                                json:"remote-tasks"`
	MaxKeepRunsUpperLimit              int    `json:"max-keep-run-upper-limit"`
	DefaultMaxKeepRuns                 int    `json:"default-max-keep-runs"`
	BitbucketCloudCheckSourceIP        bool   `default:"true"                                json:"bitbucket-cloud-check-source-ip"`
	BitbucketCloudAdditionalSourceIP   string `json:"bitbucket-cloud-additional-source-ip"`
	TektonDashboardURL                 string `json:"tekton-dashboard-url"`
	AutoConfigureNewGitHubRepo         bool   `default:"false"                               json:"auto-configure-new-github-repo"`
	AutoConfigureRepoNamespaceTemplate string `json:"auto-configure-repo-namespace-template"`

	SecretAutoCreation               bool   `default:"true"                             json:"secret-auto-create"`
	SecretGHAppRepoScoped            bool   `default:"true"                             json:"secret-github-app-token-scoped"`
	SecretGhAppTokenScopedExtraRepos string `json:"secret-github-app-scope-extra-repos"`

	ErrorLogSnippet             bool   `default:"true"                                                                          json:"error-log-snippet"`
	ErrorDetection              bool   `` /* 130-byte string literal not displayed */
	ErrorDetectionNumberOfLines int    `` /* 130-byte string literal not displayed */
	ErrorDetectionSimpleRegexp  string `default:"^(?P<filename>[^:]*):(?P<line>[0-9]+):(?P<column>[0-9]+)?([ ]*)?(?P<error>.*)" json:"error-detection-simple-regexp"`

	CustomConsoleName         string `json:"custom-console-name"`
	CustomConsoleURL          string `json:"custom-console-url"`
	CustomConsolePRdetail     string `json:"custom-console-url-pr-details"`
	CustomConsolePRTaskLog    string `json:"custom-console-url-pr-tasklog"`
	CustomConsoleNamespaceURL string `json:"custom-console-url-namespace"`

	RememberOKToTest bool `default:"true" json:"remember-ok-to-test"`
}

if there is a change performed on the default value, update the same on "config/302-pac-configmap.yaml".

func DefaultSettings ¶ added in v0.26.0

func DefaultSettings() Settings

func (*Settings) DeepCopy ¶ added in v0.23.0

func (s *Settings) DeepCopy(out *Settings)

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL