Tonis Tiigi 64bbec89ca security: validate exec security modes ...

Reject unknown SecurityMode values before generating executor specs. Ensure
only SecurityMode_INSECURE takes the insecure path, while validated non-insecure
modes keep sandbox security options. Add gateway, raw LLB, and LLB marshal
regression coverage for invalid enum values.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 972895718f963c71388aeebb7cff423ef6963a92)

2026-06-24 10:56:46 -07:00

..

buildid

allow frontends to be run directly on the control client side

2018-08-14 11:50:08 +01:00

connhelper

golangci-lint: v2 upgrade

2025-05-02 12:19:17 -07:00

llb

security: validate exec security modes

2026-06-24 10:56:46 -07:00

ociindex

Upgrade to containerd 2

2025-01-13 16:42:48 -08:00

testdata/compatibility

exporter: add compatibility version 30

2026-06-03 08:52:37 -07:00

build_test.go

security: validate exec security modes

2026-06-24 10:56:46 -07:00

build.go

gateway: create interface for reading from container filesystem

2026-01-14 11:52:39 -06:00

client_cdi_test.go

client: write CDI specs atomically in integration tests

2026-04-10 01:14:08 +02:00

client_nydus_test.go

all: use well-known zstd mediaType constants

2026-06-02 23:11:12 -07:00

client_test.go

security: validate exec security modes

2026-06-24 10:56:46 -07:00

client.go

update gopls to go1.24 compatible version

2025-05-07 18:23:20 -07:00

compatibility_test.go

client: compatibility test amd64 update

2026-04-13 17:51:21 -07:00

diskusage.go

allow duration based filters on diskusage requests

2025-05-18 20:30:18 -07:00

exporters.go

exporter: add local exporter mode=delete

2026-06-10 12:13:15 +02:00

filter.go

client: generalize the filter passing

2018-07-25 18:19:31 -07:00

graph.go

lint: gopls fixes

2025-09-09 14:13:04 +02:00

info.go

version: expose Dockerfile frontend version

2026-05-06 10:42:32 -07:00

mergediff_linux_test.go

Remove pre-Go 1.17 build tags

2024-11-21 10:58:27 +03:00

mergediff_nolinux_test.go

Remove pre-Go 1.17 build tags

2024-11-21 10:58:27 +03:00

mergediff_test.go

test: gate merge diff tests through worker capabilities

2026-05-13 11:24:14 +02:00

pinrace_6731_test.go

skip pin race test on workers without merge diff support

2026-05-13 11:11:46 +02:00

policy_test.go

client: update loopback condition for dockerd worker

2026-06-10 12:39:23 -07:00

prune.go

lint: add unconvert

2025-05-02 12:44:01 -07:00

solve_resetcache_test.go

client: add reset option for local cache exporter

2026-05-07 23:06:26 +02:00

solve.go

exporter: use root-backed fsutil receive instead of client-side staging

2026-06-10 12:24:31 +02:00

status.go

protobuf: add vtproto as a supplemental marshaler

2024-10-04 12:52:15 -05:00

validation_test.go

refactor: deduplicate NopWriteCloser into util/iohelper

2026-03-09 22:16:14 -07:00

workers.go

allow listing devices

2025-02-11 11:21:45 +01:00