Tonis Tiigi f83dedd8dd source/git: reject option-like refs in git bundle operations ...

Validate the default branch returned by ls-remote before using it, so a
malicious remote cannot advertise a HEAD symref such as  that would
later be reused as an argument to other git commands.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit a838953fe8776d68379d32a7af0776d538215763)
(cherry picked from commit eb63c321e8)

2026-07-16 17:36:38 -07:00

..

containerblob

git: add git bundle source support

2026-04-27 14:30:11 +02:00

containerimage

containerimage: preserve local fallback for default image resolution

2026-05-29 17:17:04 +02:00

git

source/git: reject option-like refs in git bundle operations

2026-07-16 17:36:38 -07:00

http

source/http: fix resolver cache ref lookup

2026-06-01 21:12:23 -07:00

local

solver: add cleanup function to jobctx and pass through sources

2025-10-13 17:39:53 -07:00

types

source: update imageblob to new docker-image+blob and ref_type naming

2026-02-24 08:05:42 -08:00

util/pathutil

source: extract SafeFileName into shared pathutil package

2026-03-25 08:14:30 -07:00

identifier.go

source: make sources pluggable

2023-08-16 09:57:55 +01:00

manager.go

solver: add cleanup function to jobctx and pass through sources

2025-10-13 17:39:53 -07:00