buildkit

mirror of https://github.com/moby/buildkit.git synced 2026-08-09 01:01:08 +00:00

Files

Tonis Tiigi eb63c321e8 source/git: reject option-like refs in git bundle operations

Validate the default branch returned by ls-remote before using it, so a
malicious remote cannot advertise a HEAD symref such as  that would
later be reused as an argument to other git commands.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit a838953fe8776d68379d32a7af0776d538215763)

2026-07-16 11:52:57 +02:00

containerblob

git: add git bundle source support

2026-04-27 14:30:11 +02:00

containerimage

containerimage: preserve local fallback for default image resolution

2026-05-29 17:17:04 +02:00

git

source/git: reject option-like refs in git bundle operations

2026-07-16 11:52:57 +02:00

http

source/http: fix resolver cache ref lookup