Affected by GO-2023-1901 and 2 other vulnerabilities

GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

GO-2026-4730: Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline

GO-2026-4761: Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod in github.com/tektoncd/pipeline

matcher

package

v1.10.1 Latest Latest Go to latest Published: Mar 2, 2026 License: Apache-2.0 Imports: 2 Imported by: 3

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/tektoncd/pipeline

Links

Documentation ¶

Index ¶

Variables
func GetSecretType(secret Secret) string
func VolumeName(secretName string) string
type Matcher
type Secret

Constants ¶

This section is empty.

Variables ¶

View Source

var VolumePath = "/tekton/creds-secrets"

VolumePath is the path where build secrets are written. It is mutable and exported for testing.

Functions ¶

func GetSecretType ¶

func GetSecretType(secret Secret) string

GetSecretType returns secret type from secret interface using reflection

func VolumeName ¶

func VolumeName(secretName string) string

VolumeName returns the full path to the secret, inside the VolumePath.

Types ¶

type Matcher ¶

type Matcher interface {
	// MatchingAnnotations extracts flags for the credential
	// helper from the supplied secret and returns a slice (of length 0 or greater)
	MatchingAnnotations(secret Secret) []string
}

Matcher is the interface for a credential initializer of any type.

type Secret ¶

type Secret interface {
	GetName() string
	GetAnnotations() map[string]string
}

Secret is the minimal interface needed for credential matching

Source Files ¶

View all Source files

matcher.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL