Affected by GO-2026-6263 and 1 other vulnerabilities

GO-2026-6263: Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code

GO-2026-6266: Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code

policy

package

v0.27.5 Latest Latest Go to latest Published: Oct 22, 2026 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation ¶

Index ¶

type Policy
- func (p *Policy) IsAllowed(ctx context.Context, tType triggertype.Trigger) (Result, string)
type Result

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Policy ¶

type Policy struct {
	Repository   *v1alpha1.Repository
	Event        *info.Event
	VCX          provider.Interface
	Logger       *zap.SugaredLogger
	EventEmitter *events.EventEmitter
}

func (*Policy) IsAllowed ¶

func (p *Policy) IsAllowed(ctx context.Context, tType triggertype.Trigger) (Result, string)

type Result ¶

type Result int

const (
	ResultNotSet     Result = 0
	ResultAllowed    Result = 1
	ResultDisallowed Result = 2
)

Source Files ¶

View all Source files

policy.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL