GO-2025-3546: PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd

lifecycle

package

v0.56.0 Latest Latest Go to latest Published: May 13, 2026 License: Apache-2.0 Imports: 15 Imported by: 0

Details

This section is empty.

This section is empty.

func DownloadBinary(sourceURL, destDir, destFile string, forceRedownload bool, logger *zap.Logger) (string, error)

DownloadBinary downloads a file from the given URL into the specified path this also marks it executable and returns its full path.

If forceRedownload is true, any existing cached binary is removed before downloading.

type Command struct {
	// contains filtered or unexported fields
}

func RunBinary(ctx context.Context, execPath string, args []string) (*Command, error)

func (c *Command) GracefulStop(period time.Duration) error

func (c *Command) IsRunning() bool