Affected by GO-2023-1901 and 2 other vulnerabilities

GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

GO-2026-4761: Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod in github.com/tektoncd/pipeline

resolution/

Details

Path	Synopsis
common Package common provides constants, errors, labels, annotations and helpers that are commonly needed by resolvers and clients need during remote resource resolution.	Package common provides constants, errors, labels, annotations and helpers that are commonly needed by resolvers and clients need during remote resource resolution.
resolver
bundle
cluster
framework
framework/testing
git
http
hub
resource