GO-2025-3546: PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd

lifecycle

package

v0.52.0 Latest Latest Go to latest Published: May 28, 2025 License: Apache-2.0 Imports: 15 Imported by: 0

Details

This section is empty.

This section is empty.

func DownloadBinary(sourceURL, destDir, destFile string, logger *zap.Logger) (string, error)

DownloadBinary downloads a file from the given URL into the specified path this also marks it executable and returns its full path.

type Command struct {
	// contains filtered or unexported fields
}

func RunBinary(ctx context.Context, execPath string, args []string) (*Command, error)

func (c *Command) GracefulStop(period time.Duration) error

func (c *Command) IsRunning() bool