Affected by GO-2026-4327 and 6 other vulnerabilities

GO-2026-4327: Skipper is vulnerable to arbitrary code execution through lua filters in github.com/zalando/skipper

GO-2026-4378: Skipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName in github.com/zalando/skipper

GO-2026-5944: Skipper: opaAuthorizeRequestWithBody filter bypasses OPA policy on Transfer-Encoding — chunked / HTTP/2 requests in github.com/zalando/skipper

GO-2026-6015: Skipper: Unbounded Request Body Read in Admission Webhook Causes Memory Exhaustion DoS in github.com/zalando/skipper

GO-2026-6018: Skipper's routesrv-no-auth component: All routesrv API Endpoints Lack Authentication in github.com/zalando/skipper

GO-2026-6019: Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies in github.com/zalando/skipper

GO-2026-6495: Skipper has OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix GHSA-8qqm-fp2q-v734) in github.com/zalando/skipper

secrettest

package

v0.22.113 Latest Latest Go to latest Published: Sep 16, 2025 License: Apache-2.0, MIT Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/zalando/skipper

Links

Open Source Insights

Documentation ¶

Index ¶

type TestRegistry
- func NewTestRegistry() *TestRegistry
- func (tr *TestRegistry) GetEncrypter(refreshInterval time.Duration, s string) (secrets.Encryption, error)
type TestingSecretSource
- func (s *TestingSecretSource) GetSecret() ([][]byte, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type TestRegistry ¶

type TestRegistry struct {
	// contains filtered or unexported fields
}

func NewTestRegistry ¶

func NewTestRegistry() *TestRegistry

NewTestRegistry returns a singleton TestRegistry

func (*TestRegistry) GetEncrypter ¶ added in v0.11.27

func (tr *TestRegistry) GetEncrypter(refreshInterval time.Duration, s string) (secrets.Encryption, error)

type TestingSecretSource ¶

type TestingSecretSource struct {
	// contains filtered or unexported fields
}

func (*TestingSecretSource) GetSecret ¶

func (s *TestingSecretSource) GetSecret() ([][]byte, error)

Source Files ¶

View all Source files

secrettest.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL