buildkit

0 Fork 0

mirror of https://github.com/moby/buildkit.git synced 2026-11-06 05:16:45 +00:00

Files

T

Tonis Tiigi e9c7645d8a security: validate Git full remote URLs

Require git.fullurl to resolve to the same host and repository path as the
source identifier. Normalize accepted aliases before using the remote.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 7134cb38a068f3f64cb6b0b49cc3b87384423d88)

2026-09-30 15:12:30 +02:00

containerblob

source: verify container blob digests

2026-09-30 15:12:22 +02:00

containerimage

source: avoid unverified image config cache key

2026-09-30 15:12:23 +02:00

git

security: validate Git full remote URLs

2026-09-30 15:12:30 +02:00

http

source/http: redact credentials in diagnostics