Affected by GO-2025-4193 and 1 other vulnerabilities

GO-2025-4193: Fulcio allocates excessive memory during token parsing in github.com/sigstore/fulcio

GO-2026-4311: Fulcio is vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass in github.com/sigstore/fulcio

server

package

v1.3.1 Latest Latest Go to latest Published: May 3, 2023 License: Apache-2.0 Imports: 37 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/fulcio

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func NewGRPCCAServer(ct *ctclient.LogClient, ca certauth.CertificateAuthority, ...) fulciogrpc.CAServer
func NewIssuerPool(cfg *config.FulcioConfig) identity.IssuerPool
func NewLegacyGRPCCAServer(v2Server fulciogrpc.CAServer) legacy.CAServer
func WithMaxBytes(next http.Handler, n int64) http.Handler
type Info
- func VersionInfo() Info
- func (i *Info) JSONString() (string, error)
- func (i *Info) String() string

Constants ¶

View Source

const (
	PEMCertificateChain         = "application/pem-certificate-chain"
	SCTMetadataKey              = "x-sct"
	HTTPResponseCodeMetadataKey = "x-http-code"
)

View Source

const (
	MetadataOIDCTokenKey = "oidcidentitytoken"
)

Variables ¶

View Source

var (
	MetricLatency = promauto.NewHistogramVec(prometheus.HistogramOpts{
		Name: "fulcio_api_latency",
		Help: "API Latency on calls",
	}, []string{"code", "method"})

	RequestsCount = promauto.NewCounterVec(prometheus.CounterOpts{
		Name: "http_requests_total",
		Help: "Count all HTTP requests",
	}, []string{"code", "method"})
)

Functions ¶

func NewGRPCCAServer ¶

func NewGRPCCAServer(ct *ctclient.LogClient, ca certauth.CertificateAuthority, ip identity.IssuerPool) fulciogrpc.CAServer

func NewIssuerPool ¶ added in v1.2.0

func NewIssuerPool(cfg *config.FulcioConfig) identity.IssuerPool

func NewLegacyGRPCCAServer ¶

func NewLegacyGRPCCAServer(v2Server fulciogrpc.CAServer) legacy.CAServer

func WithMaxBytes ¶

func WithMaxBytes(next http.Handler, n int64) http.Handler

WithMaxBytes sets the max request size on a handler to n bytes.

Types ¶

type Info ¶

type Info struct {
	GitVersion   string
	GitCommit    string
	GitTreeState string
	BuildDate    string
	GoVersion    string
	Compiler     string
	Platform     string
}

func VersionInfo ¶

func VersionInfo() Info

func (*Info) JSONString ¶

func (i *Info) JSONString() (string, error)

JSONString returns the JSON representation of the version info

func (*Info) String ¶

func (i *Info) String() string

String returns the string representation of the version info

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL