framework

Jul 31, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jul 20, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 30, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 11, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

May 29, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 16, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 11, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Apr 30, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Apr 21, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Mar 30, 2026 GO-2023-1901 +6 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jun 8, 2026 GO-2023-1901 +6 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Mar 17, 2026 GO-2023-1901 +6 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Mar 2, 2026 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Feb 26, 2026 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jul 3, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 22, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 12, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Apr 21, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Mar 17, 2026 GO-2023-1901 +5 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Feb 19, 2026 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jan 30, 2026 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Dec 3, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jul 27, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jul 6, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 22, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 12, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Apr 21, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Mar 18, 2026 GO-2023-1901 +5 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Oct 30, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Oct 2, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Sep 4, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jun 22, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 12, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Apr 21, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Mar 17, 2026 GO-2023-1901 +5 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Sep 4, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Aug 5, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jul 31, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jun 8, 2026 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jun 30, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

May 29, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Jun 8, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Jun 3, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Apr 21, 2026 GO-2023-1901

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Mar 17, 2026 GO-2023-1901 +5 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Apr 28, 2025 GO-2023-1901 +7 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-4761: Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

  GO-2026-5272: Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

  GO-2026-5486: Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

  GO-2026-5643: Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

  GO-2026-5711: Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Mar 25, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Mar 18, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Mar 6, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Mar 14, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jan 30, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Dec 3, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Mar 14, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jan 22, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jan 9, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Dec 3, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Nov 25, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Nov 18, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Nov 5, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Oct 24, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Sep 27, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Aug 30, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Mar 14, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jan 22, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jan 14, 2025 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Nov 18, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Nov 5, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Oct 16, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Sep 2, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Aug 20, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jul 31, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jul 25, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jul 9, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jun 24, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Jun 4, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

May 27, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

May 22, 2024 GO-2023-1901 +2 more

  GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

  GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

  GO-2026-5630: Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Changes in this version

+ const FakeUrl

+ func NewController(ctx context.Context, resolver Resolver, modifiers ...ReconcilerModifier) func(context.Context, configmap.Watcher) *controller.Impl

+ type FakeResolver framework.FakeResolver

+ func (r *FakeResolver) GetName(_ context.Context) string

+ func (r *FakeResolver) GetResolutionTimeout(ctx context.Context, defaultTimeout time.Duration) time.Duration

+ func (r *FakeResolver) GetSelector(_ context.Context) map[string]string

+ func (r *FakeResolver) Initialize(ctx context.Context) error

+ func (r *FakeResolver) Resolve(_ context.Context, req *v1beta1.ResolutionRequestSpec) (framework.ResolvedResource, error)

+ func (r *FakeResolver) Validate(_ context.Context, req *v1beta1.ResolutionRequestSpec) error

+ type Reconciler struct

+ Clock clock.PassiveClock

+ func (r *Reconciler) MarkFailed(ctx context.Context, rr *v1beta1.ResolutionRequest, resolutionErr error) error

+ func (r *Reconciler) OnError(ctx context.Context, rr *v1beta1.ResolutionRequest, err error) error

+ func (r *Reconciler) Reconcile(ctx context.Context, key string) error

+ type ReconcilerModifier = func(reconciler *Reconciler)

+ type Resolver interface

+ GetName func(ctx context.Context) string

+ GetSelector func(ctx context.Context) map[string]string

+ Initialize func(ctx context.Context) error

+ Resolve func(ctx context.Context, req *v1beta1.ResolutionRequestSpec) (framework.ResolvedResource, error)

+ Validate func(ctx context.Context, req *v1beta1.ResolutionRequestSpec) error