Tonis Tiigi 9cdf642943 fs: reject special files for ref reads ...

Ref and rootfs helpers may read paths supplied by frontends or build outputs.
Reject non-regular files before reading them into memory so device and FIFO
paths cannot feed no-EOF streams into parsers or bundle injection logic.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>

2026-06-26 00:02:39 -07:00

..

containerdexecutor

Revert "executor: fix containerd stdin close race"

2026-06-10 18:25:51 +02:00

oci

user: limit size of parsed passwd/group files

2026-06-24 10:56:53 -07:00

resources

ci: update golangci to v2.8.0

2026-01-13 22:09:20 -08:00

runcexecutor

network: split exec proxy from net mode

2026-06-09 09:11:33 -07:00

containerid_test.go

executor: validate container IDs centrally

2026-03-25 08:14:29 -07:00

containerid.go

executor: validate container IDs centrally

2026-03-25 08:14:29 -07:00

executor.go

network: split exec proxy from net mode

2026-06-09 09:11:33 -07:00

proxyca_linux_test.go

test: cover proxy network source conversion

2026-06-04 11:23:03 -07:00

proxyca_linux.go

fs: reject special files for ref reads

2026-06-26 00:02:39 -07:00

proxyca_unsupported.go

solver: add proxy network mode

2026-06-04 11:23:00 -07:00

stubs.go

golangci-lint: v2 upgrade

2025-05-02 12:19:17 -07:00