Affected by GO-2023-1901
and 2 other vulnerabilities
GO-2023-1901 : Pipelines do not validate child UIDs in github.com/tektoncd/pipeline
GO-2026-4730 : Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline
GO-2026-4761 : Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod in github.com/tektoncd/pipeline
Discover Packages
github.com/tektoncd/pipeline
pkg
remoteresolution
resolver
package
Version:
v1.10.0
Opens a new window with list of versions in this module.
Published: Feb 26, 2026
License: Apache-2.0
Opens a new window with license information.
Imports: 0
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
Package resolver contains the upgraded remote resolution framework.
It contains the upgraded framework and the built-in resolves.
It is equivalent to `pkg/resolution/resolver`.
This was necessary to ensure backwards compatibility with the existing framework.
This package is subject to further refactoring and changes.
Source Files
¶
Directories
¶
Package framework contains the upgraded remote resolution framework.
Package framework contains the upgraded remote resolution framework.
Click to show internal directories.
Click to hide internal directories.