Affected by GO-2023-1804 and 3 other vulnerabilities

GO-2023-1804: Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno

GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

policychanges

package

v1.6.2-rc2 Latest Latest Go to latest Published: Mar 29, 2022 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type PolicyChangeType string

const (
	PolicyCreated PolicyChangeType = "created"
	PolicyUpdated PolicyChangeType = "updated"
	PolicyDeleted PolicyChangeType = "deleted"
)

type PromConfig metrics.PromConfig

func ParsePromConfig(pc metrics.PromConfig) PromConfig

func (pc PromConfig) RegisterPolicy(policy interface{}, policyChangeType PolicyChangeType) error

type PromMetrics metrics.PromMetrics

func ParsePromMetrics(pm metrics.PromMetrics) PromMetrics