layout

May 29, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 22, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 21, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 21, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 15, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 15, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 15, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

May 1, 2025 GO-2026-4636 +1 more

  GO-2026-4636: Zarf's symlink targets in archives are not validated against destination directory in github.com/zarf-dev/zarf

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Apr 23, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Apr 23, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Apr 18, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Apr 17, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Apr 2, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Mar 20, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Mar 6, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Feb 19, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Feb 6, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Jan 30, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Jan 23, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Jan 9, 2025 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Dec 12, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Dec 5, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Nov 18, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Nov 13, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Nov 7, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Oct 31, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Oct 17, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Oct 3, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Sep 19, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Sep 18, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Sep 5, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Aug 22, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Aug 12, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Aug 8, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Aug 8, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Jul 29, 2024 GO-2026-5542

  GO-2026-5542: Path traversal via malicious package name in github.com/zarf-dev/zarf

Changes in this version

+ const ChartsDir

+ const Checksums

+ const ComponentsDir

+ const DataInjectionsDir

+ const FilesDir

+ const ImagesDir

+ const IndexJSON

+ const ManifestsDir

+ const OCILayout

+ const ReposDir

+ const SBOMDir

+ const SBOMTar

+ const Signature

+ const TempDir

+ const ValuesDir

+ const ZarfYAML

+ var ErrNotLoaded = fmt.Errorf("not loaded")

+ var ImagesBlobsDir = filepath.Join(ImagesDir, "blobs", "sha256")

+ var IndexPath = filepath.Join(ImagesDir, IndexJSON)

+ var OCILayoutPath = filepath.Join(ImagesDir, OCILayout)

+ type ComponentPaths struct

+ Base string

+ Charts string

+ DataInjections string

+ Files string

+ Manifests string

+ Repos string

+ Temp string

+ Values string

+ type ComponentSBOM struct

+ Component *ComponentPaths

+ Files []string

+ type Components struct

+ Base string

+ Dirs map[string]*ComponentPaths

+ Tarballs map[string]string

+ func (c *Components) Archive(component types.ZarfComponent, cleanupTemp bool) (err error)

+ func (c *Components) Create(component types.ZarfComponent) (cp *ComponentPaths, err error)

+ func (c *Components) Unarchive(component types.ZarfComponent) (err error)

+ type Images struct

+ Base string

+ Blobs []string

+ Index string

+ OCILayout string

+ func (i *Images) AddBlob(blob string)

+ func (i *Images) AddV1Image(img v1.Image) error

+ type PackagePaths struct

+ Base string

+ Checksums string

+ Components Components

+ Images Images

+ SBOMs SBOMs

+ Signature string

+ ZarfYAML string

+ func New(baseDir string) *PackagePaths

+ func (pp *PackagePaths) AddImages() *PackagePaths

+ func (pp *PackagePaths) AddSBOMs() *PackagePaths

+ func (pp *PackagePaths) ArchivePackage(destinationTarball string, maxPackageSizeMB int) error

+ func (pp *PackagePaths) Files() map[string]string

+ func (pp *PackagePaths) GenerateChecksums() (string, error)

+ func (pp *PackagePaths) IsLegacyLayout() bool

+ func (pp *PackagePaths) MigrateLegacy() (err error)

+ func (pp *PackagePaths) ReadZarfYAML() (pkg types.ZarfPackage, warnings []string, err error)

+ func (pp *PackagePaths) SetFromLayers(layers []ocispec.Descriptor)

+ func (pp *PackagePaths) SetFromPaths(paths []string)

+ func (pp *PackagePaths) SignPackage(signingKeyPath, signingKeyPassword string, isInteractive bool) error

+ type SBOMs struct

+ Path string

+ func (s *SBOMs) Archive() (err error)

+ func (s *SBOMs) OutputSBOMFiles(outputDir, packageName string) (string, error)

+ func (s *SBOMs) StageSBOMViewFiles() (sbomViewFiles, warnings []string, err error)

+ func (s *SBOMs) Unarchive() (err error)

+ func (s SBOMs) IsTarball() bool