acceptance

package

Versions in this module

v1

v1.6.0

Sep 8, 2026 GO-2026-5939

GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

v1.5.54

Jul 20, 2026 GO-2026-5939

GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

v1.5.53

Jul 17, 2026 GO-2026-5939

GO-2026-5939: Claircore: Unauthenticated attackers can submit manifests with URIs pointing to internal services or cloud metadata endpoints in github.com/quay/claircore

Changes in this version

+ var ErrNotAFixture = errors.New("image is not a test fixture")

+ func FetchVEXDocs(ctx context.Context, client *http.Client, urls []string) ([][]byte, error)

+ func Run(ctx context.Context, t *testing.T, a Auditor, refs []string, ...)

+ type Auditor interface

+ Audit func(ctx context.Context, t testing.TB, ref string, csafDocs iter.Seq[io.Reader]) ([]Result, error)

+ type ClaircoreAuditor struct

+ func NewClaircoreAuditor(ctx context.Context, t testing.TB, cfg *ClaircoreConfig, client *http.Client) (*ClaircoreAuditor, error)

+ func (a *ClaircoreAuditor) Audit(ctx context.Context, t testing.TB, reference string, ...) ([]Result, error)

+ func (a *ClaircoreAuditor) Close(ctx context.Context) error

+ type ClaircoreConfig struct

+ IndexerDSN string