Tonis Tiigi 64bbec89ca security: validate exec security modes ...

Reject unknown SecurityMode values before generating executor specs. Ensure
only SecurityMode_INSECURE takes the insecure path, while validated non-insecure
modes keep sandbox security options. Add gateway, raw LLB, and LLB marshal
regression coverage for invalid enum values.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 972895718f963c71388aeebb7cff423ef6963a92)

2026-06-24 10:56:46 -07:00

..

imagemetaresolver

image: move image source resolver away from old interface

2025-11-05 14:15:42 -08:00

llbbuild

llb: avoid concurrent map write on parallel marshal

2024-12-06 17:53:59 -08:00

llbtest

update gopls to go1.24 compatible version

2025-05-07 18:23:20 -07:00

sourceresolver

http: add support for checksum requests for http sources

2026-02-20 08:13:32 -08:00

async_test.go

llb: add constraints to async llb

2021-06-22 21:34:43 -07:00

async.go

llb: rewrite llb.Async with CachedGroup

2024-06-11 19:20:30 -07:00

definition_test.go

tests: use t.Context in unit tests

2026-02-25 16:41:54 -08:00

definition.go

refactor: add typed sync.Map wrapper to eliminate type assertions

2026-03-09 22:15:43 -07:00

diff.go

llb: avoid concurrent map write on parallel marshal

2024-12-06 17:53:59 -08:00

exec_test.go

security: validate exec security modes

2026-06-24 10:56:46 -07:00

exec.go

security: validate exec security modes

2026-06-24 10:56:46 -07:00

fileop_test.go

tests: use t.Context in unit tests

2026-02-25 16:41:54 -08:00

fileop.go

chore: fix duplicated words in llb, executor and dockerfile_test comments

2026-05-14 06:42:49 +00:00

git_test.go

git: add git bundle source support

2026-04-27 14:30:11 +02:00

marshal.go

apply x/tools/modernize fixes

2025-03-07 08:18:45 -08:00

merge_test.go

Add initial MergeOp implementation.

2021-11-18 11:10:48 -08:00

merge.go

llb: avoid concurrent map write on parallel marshal

2024-12-06 17:53:59 -08:00

meta_test.go

lint: more testifylint fixes

2024-06-10 21:16:51 -07:00

meta.go

solver: add per-step CPU and memory resource limits

2026-05-27 11:34:13 +02:00

passthrough_test.go

llb: add passthrough op

2026-06-08 11:26:15 -07:00

passthrough.go

llb: add passthrough op

2026-06-08 11:26:15 -07:00

resolver_test.go

image: move image source resolver away from old interface

2025-11-05 14:15:42 -08:00

resolver.go

llb: add checksum option to llb.Image

2025-09-19 17:40:40 -07:00

source.go

git: add git bundle source support

2026-04-27 14:30:11 +02:00

sourcemap.go

llb: avoid duplicate instances of sourcemaps in provenance

2023-08-31 08:28:40 -07:00

state_test.go

source: add support for oci-layout+blob schema

2026-02-24 08:05:42 -08:00

state.go

llb: add passthrough op

2026-06-08 11:26:15 -07:00