GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

fetch

package

v1.5.54 Latest Latest Go to latest Published: Jul 20, 2026 License: Apache-2.0 Imports: 19 Imported by: 1

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/quay/claircore

Links

Documentation ¶

Overview ¶

Package fetch implements just enough of a client for the OCI Distribution specification for use in tests.

Index ¶

func Layer(ctx context.Context, t testing.TB, from, repo string, blob claircore.Digest, ...) (*os.File, error)
type Option
Bugs

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func Layer ¶

func Layer(ctx context.Context, t testing.TB, from, repo string, blob claircore.Digest, opt ...Option) (*os.File, error)

Layer returns the specified layer contents, cached in the global layer cache.

Types ¶

type Option ¶ added in v1.4.5

type Option uint

Option is options for [Fetch]

const (

	// IgnoreIntegration causes [Fetch] to use the network unconditionally.
	IgnoreIntegration Option
	// NoDecompression does no compression.
	NoDecompression
)

Notes ¶

Bugs ¶

Any compression scheme that isn't gzip isn't handled correctly.

Source Files ¶

View all Source files

layer.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL