Affected by GO-2022-0704
and 12 other vulnerabilities
GO-2022-0704 : Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030) in github.com/goharbor/harbor
GO-2022-0781 : Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788) in github.com/goharbor/harbor
GO-2022-0785 : "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor
GO-2022-0818 : Missing Authorization in Harbor in github.com/goharbor/harbor
GO-2022-0853 : SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
GO-2022-0863 : Privilege Escalation in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
GO-2022-0865 : Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor
GO-2022-0876 : Cross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
GO-2022-0883 : SQL Injection in Cloud Native Computing Foundation Harbor in github.com/goharbor/harbor
GO-2023-2109 : Harbor timing attack risk in github.com/goharbor/harbor
GO-2024-2915 : Open Redirect URL in Harbor in github.com/goharbor/harbor
GO-2024-2916 : SQL Injection in Harbor scan log API in github.com/goharbor/harbor
GO-2024-3013 : Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor
Discover Packages
github.com/goharbor/harbor
src
jobservice
job
impl
utils
package
Version:
v1.8.2
Opens a new window with list of versions in this module.
Published: Aug 5, 2019
License: Apache-2.0
Opens a new window with license information.
Imports: 8
Opens a new window with list of imports.
Imported by: 32
Opens a new window with list of known importers.
Jump to ...
Documentation
Index
Constants
Variables
Functions
BuildBlobURL(endpoint, repository, digest)
GetClient()
GetTokenForRepo(repository, secret, internalTokenServiceURL)
NewRepositoryClient(endpoint, insecure, credential, tokenServiceEndpoint, repository)
NewRepositoryClientForJobservice(repository, internalRegistryURL, secret, internalTokenServiceURL)
Types
Source Files
Documentation
Documentation
¶
func BuildBlobURL(endpoint, repository, digest string) string
func GetClient() (*http.Client, error)
func GetTokenForRepo(repository, secret, internalTokenServiceURL string) (string, error)
func NewRepositoryClient(endpoint string, insecure bool, credential auth.Credential, ...) (*registry.Repository, error)
func NewRepositoryClientForJobservice(repository, internalRegistryURL, secret, internalTokenServiceURL string) (*registry.Repository, error)
type UserAgentModifier
func BuildBlobURL(endpoint, repository, digest string ) string
BuildBlobURL ...
GetClient returns the HTTP client that will attach jobservce secret to the request, which can be used for
accessing Harbor's Core Service.
This function returns error if the secret of Job service is not set.
func GetTokenForRepo(repository, secret, internalTokenServiceURL string ) (string , error )
GetTokenForRepo is used for job handler to get a token for clair.
NewRepositoryClient creates a repository client with standard token authorizer
NewRepositoryClientForJobservice creates a repository client that can only be used to
access the internal registry
type UserAgentModifier struct {
UserAgent string
}
UserAgentModifier adds the "User-Agent" header to the request
Modify adds user-agent header to the request
Source Files
¶
Click to show internal directories.
Click to hide internal directories.