Affected by GO-2025-4193 and 1 other vulnerabilities

GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio

GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio

challenges

package

v0.2.0 Latest Latest Go to latest Published: Mar 8, 2022 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/fulcio

Links

Open Source Insights

Documentation ¶

Index ¶

func CheckSignature(pub crypto.PublicKey, proof []byte, email string) error
type AdditionalInfo
type ChallengeResult
type ChallengeType

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CheckSignature ¶

func CheckSignature(pub crypto.PublicKey, proof []byte, email string) error

Types ¶

type AdditionalInfo ¶ added in v0.2.0

type AdditionalInfo int

const (
	GithubWorkflowTrigger AdditionalInfo = iota
	GithubWorkflowSha
	GithubWorkflowName
	GithubWorkflowRepository
	GithubWorkflowRef
)

Additional information that can be added as a cert extension.

type ChallengeResult ¶

type ChallengeResult struct {
	Issuer    string
	TypeVal   ChallengeType
	PublicKey crypto.PublicKey
	Value     string
	// Extra information from the token that can be added to extensions.
	AdditionalInfo map[AdditionalInfo]string
}

func Email ¶

func Email(ctx context.Context, principal *oidc.IDToken, pubKey crypto.PublicKey, challenge []byte) (*ChallengeResult, error)

func GithubWorkflow ¶ added in v0.2.0

func GithubWorkflow(ctx context.Context, principal *oidc.IDToken, pubKey crypto.PublicKey, challenge []byte) (*ChallengeResult, error)

func Kubernetes ¶ added in v0.2.0

func Kubernetes(ctx context.Context, principal *oidc.IDToken, pubKey crypto.PublicKey, challenge []byte) (*ChallengeResult, error)

func Spiffe ¶

func Spiffe(ctx context.Context, principal *oidc.IDToken, pubKey crypto.PublicKey, challenge []byte) (*ChallengeResult, error)

type ChallengeType ¶

type ChallengeType int

const (
	EmailValue ChallengeType = iota
	SpiffeValue
	GithubWorkflowValue
	KubernetesValue
)

Source Files ¶

View all Source files

challenges.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL