GO-2023-1901: Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/tektoncd/pipeline

Links

Open Source Insights

Directories ¶

Path	Synopsis
apis Package apis contains API Schema definitions for the various API groups	Package apis contains API Schema definitions for the various API groups
config
config/resolver
config/testing
pipeline
pipeline/internal/checksum
pipeline/pod Package pod contains non-versioned pod configuration +k8s:openapi-gen=true +gencrdrefdocs:unversionedTypes +groupName=tekton.dev	Package pod contains non-versioned pod configuration +k8s:openapi-gen=true +gencrdrefdocs:unversionedTypes +groupName=tekton.dev
pipeline/v1
pipeline/v1alpha1 Package v1alpha1 contains API Schema definitions for the pipeline v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/pipeline +k8s:defaulter-gen=TypeMeta +groupName=tekton.dev	Package v1alpha1 contains API Schema definitions for the pipeline v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/pipeline +k8s:defaulter-gen=TypeMeta +groupName=tekton.dev
pipeline/v1beta1 Package v1beta1 contains API Schema definitions for the pipeline v1beta1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/pipeline +k8s:defaulter-gen=TypeMeta +groupName=tekton.dev	Package v1beta1 contains API Schema definitions for the pipeline v1beta1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/pipeline +k8s:defaulter-gen=TypeMeta +groupName=tekton.dev
resolution
resolution/v1alpha1 +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=resolution.tekton.dev	+k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=resolution.tekton.dev
resolution/v1beta1 +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=resolution.tekton.dev	+k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=resolution.tekton.dev
resource/v1alpha1 Package v1alpha1 contains API Schema definitions for the pipeline v1alpha1 API group +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/resource +k8s:defaulter-gen=TypeMeta +groupName=tekton.dev	Package v1alpha1 contains API Schema definitions for the pipeline v1alpha1 API group +k8s:deepcopy-gen=package,register +k8s:conversion-gen=github.com/tektoncd/pipeline/pkg/apis/resource +k8s:defaulter-gen=TypeMeta +groupName=tekton.dev
run/v1alpha1 Package v1alpha1 contains API Schema definitions for the run v1alpha1 API group +groupName=tekton.dev	Package v1alpha1 contains API Schema definitions for the run v1alpha1 API group +groupName=tekton.dev
run/v1beta1 Package v1beta1 contains API Schema definitions for the customrun v1beta1 API group +groupName=tekton.dev	Package v1beta1 contains API Schema definitions for the customrun v1beta1 API group +groupName=tekton.dev
validate
version
client
clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/pipeline/v1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/pipeline/v1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/pipeline/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/pipeline/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
clientset/versioned/typed/pipeline/v1beta1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/pipeline/v1beta1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/internalinterfaces
informers/externalversions/pipeline
informers/externalversions/pipeline/v1
informers/externalversions/pipeline/v1alpha1
informers/externalversions/pipeline/v1beta1
injection/client
injection/client/fake
injection/informers/factory
injection/informers/factory/fake
injection/informers/factory/filtered
injection/informers/factory/filtered/fake
injection/informers/pipeline/v1/pipeline
injection/informers/pipeline/v1/pipeline/fake
injection/informers/pipeline/v1/pipeline/filtered
injection/informers/pipeline/v1/pipeline/filtered/fake
injection/informers/pipeline/v1/pipelinerun
injection/informers/pipeline/v1/pipelinerun/fake
injection/informers/pipeline/v1/pipelinerun/filtered
injection/informers/pipeline/v1/pipelinerun/filtered/fake
injection/informers/pipeline/v1/task
injection/informers/pipeline/v1/task/fake
injection/informers/pipeline/v1/task/filtered
injection/informers/pipeline/v1/task/filtered/fake
injection/informers/pipeline/v1/taskrun
injection/informers/pipeline/v1/taskrun/fake
injection/informers/pipeline/v1/taskrun/filtered
injection/informers/pipeline/v1/taskrun/filtered/fake
injection/informers/pipeline/v1alpha1/run
injection/informers/pipeline/v1alpha1/run/fake
injection/informers/pipeline/v1alpha1/run/filtered
injection/informers/pipeline/v1alpha1/run/filtered/fake
injection/informers/pipeline/v1alpha1/stepaction
injection/informers/pipeline/v1alpha1/stepaction/fake
injection/informers/pipeline/v1alpha1/stepaction/filtered
injection/informers/pipeline/v1alpha1/stepaction/filtered/fake
injection/informers/pipeline/v1alpha1/verificationpolicy
injection/informers/pipeline/v1alpha1/verificationpolicy/fake
injection/informers/pipeline/v1alpha1/verificationpolicy/filtered
injection/informers/pipeline/v1alpha1/verificationpolicy/filtered/fake
injection/informers/pipeline/v1beta1/clustertask
injection/informers/pipeline/v1beta1/clustertask/fake
injection/informers/pipeline/v1beta1/clustertask/filtered
injection/informers/pipeline/v1beta1/clustertask/filtered/fake
injection/informers/pipeline/v1beta1/customrun
injection/informers/pipeline/v1beta1/customrun/fake
injection/informers/pipeline/v1beta1/customrun/filtered
injection/informers/pipeline/v1beta1/customrun/filtered/fake
injection/informers/pipeline/v1beta1/pipeline
injection/informers/pipeline/v1beta1/pipeline/fake
injection/informers/pipeline/v1beta1/pipeline/filtered
injection/informers/pipeline/v1beta1/pipeline/filtered/fake
injection/informers/pipeline/v1beta1/pipelinerun
injection/informers/pipeline/v1beta1/pipelinerun/fake
injection/informers/pipeline/v1beta1/pipelinerun/filtered
injection/informers/pipeline/v1beta1/pipelinerun/filtered/fake
injection/informers/pipeline/v1beta1/task
injection/informers/pipeline/v1beta1/task/fake
injection/informers/pipeline/v1beta1/task/filtered
injection/informers/pipeline/v1beta1/task/filtered/fake
injection/informers/pipeline/v1beta1/taskrun
injection/informers/pipeline/v1beta1/taskrun/fake
injection/informers/pipeline/v1beta1/taskrun/filtered
injection/informers/pipeline/v1beta1/taskrun/filtered/fake
injection/reconciler/pipeline/v1/pipeline
injection/reconciler/pipeline/v1/pipelinerun
injection/reconciler/pipeline/v1/task
injection/reconciler/pipeline/v1/taskrun
injection/reconciler/pipeline/v1alpha1/run
injection/reconciler/pipeline/v1alpha1/stepaction
injection/reconciler/pipeline/v1alpha1/verificationpolicy
injection/reconciler/pipeline/v1beta1/clustertask
injection/reconciler/pipeline/v1beta1/customrun
injection/reconciler/pipeline/v1beta1/pipeline
injection/reconciler/pipeline/v1beta1/pipelinerun
injection/reconciler/pipeline/v1beta1/task
injection/reconciler/pipeline/v1beta1/taskrun
listers/pipeline/v1
listers/pipeline/v1alpha1
listers/pipeline/v1beta1
resolution/clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
resolution/clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
resolution/clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
resolution/clientset/versioned/typed/resolution/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
resolution/clientset/versioned/typed/resolution/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
resolution/clientset/versioned/typed/resolution/v1beta1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
resolution/clientset/versioned/typed/resolution/v1beta1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
resolution/informers/externalversions
resolution/informers/externalversions/internalinterfaces
resolution/informers/externalversions/resolution
resolution/informers/externalversions/resolution/v1alpha1
resolution/informers/externalversions/resolution/v1beta1
resolution/injection/client
resolution/injection/client/fake
resolution/injection/informers/factory
resolution/injection/informers/factory/fake
resolution/injection/informers/factory/filtered
resolution/injection/informers/factory/filtered/fake
resolution/injection/informers/resolution/v1alpha1/resolutionrequest
resolution/injection/informers/resolution/v1alpha1/resolutionrequest/fake
resolution/injection/informers/resolution/v1alpha1/resolutionrequest/filtered
resolution/injection/informers/resolution/v1alpha1/resolutionrequest/filtered/fake
resolution/injection/informers/resolution/v1beta1/resolutionrequest
resolution/injection/informers/resolution/v1beta1/resolutionrequest/fake
resolution/injection/informers/resolution/v1beta1/resolutionrequest/filtered
resolution/injection/informers/resolution/v1beta1/resolutionrequest/filtered/fake
resolution/injection/reconciler/resolution/v1alpha1/resolutionrequest
resolution/injection/reconciler/resolution/v1beta1/resolutionrequest
resolution/listers/resolution/v1alpha1
resolution/listers/resolution/v1beta1
resource/clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
resource/clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
resource/clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
resource/clientset/versioned/typed/resource/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
resource/clientset/versioned/typed/resource/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
resource/informers/externalversions
resource/informers/externalversions/internalinterfaces
resource/informers/externalversions/resource
resource/informers/externalversions/resource/v1alpha1
resource/injection/client
resource/injection/client/fake
resource/injection/informers/factory
resource/injection/informers/factory/fake
resource/injection/informers/factory/filtered
resource/injection/informers/factory/filtered/fake
resource/injection/informers/resource/v1alpha1/pipelineresource
resource/injection/informers/resource/v1alpha1/pipelineresource/fake
resource/injection/informers/resource/v1alpha1/pipelineresource/filtered
resource/injection/informers/resource/v1alpha1/pipelineresource/filtered/fake
resource/listers/resource/v1alpha1
container
controller Package controller provides helper methods for external controllers for Custom Task types.	Package controller provides helper methods for external controllers for Custom Task types.
credentials
dockercreds
gitcreds
entrypoint
internal
affinityassistant
computeresources
computeresources/compare
computeresources/limitrange
computeresources/tasklevel
resolution
list
names
pipelinerunmetrics
fake
pod Package pod provides methods for converting between a TaskRun and a Pod.	Package pod provides methods for converting between a TaskRun and a Pod.
reconciler Package reconciler defines implementations of the Reconciler interface defined at knative.dev/pkg/controller.Reconciler.	Package reconciler defines implementations of the Reconciler interface defined at knative.dev/pkg/controller.Reconciler.
apiserver
events Package events defines the interface and different implementations for events	Package events defines the interface and different implementations for events
events/cache
events/cloudevent
events/k8sevent
notifications/customrun
pipeline/dag
pipelinerun
pipelinerun/pipelinespec
pipelinerun/resources
resolutionrequest Package resolutionrequest provides a reconciler for ResolutionRequest objects.	Package resolutionrequest provides a reconciler for ResolutionRequest objects.
taskrun
taskrun/resources
testing
volumeclaim
remote
oci
resolution
resolution
common Package common provides constants, errors, labels, annotations and helpers that are commonly needed by resolvers and clients need during remote resource resolution.	Package common provides constants, errors, labels, annotations and helpers that are commonly needed by resolvers and clients need during remote resource resolution.
resolver/bundle
resolver/cluster
resolver/framework
resolver/framework/testing
resolver/git
resolver/hub
resolver/internal
resource
result
spire The spire package is used to interact with the Spire server and Spire agent respectively.	The spire package is used to interact with the Spire server and Spire agent respectively.
config
test
test/errstrings OS specific error strings	OS specific error strings
test/fakebundleendpoint
test/fakeworkloadapi
test/pemutil
test/x509util
status
substitution
taskrunmetrics
fake
termination
tracing
trustedresources
verifier
workspace

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL