security

May 6, 2020 GO-2023-1505

  GO-2023-1505: Arbitrary file read vulnerability in github.com/uber/kraken

Changes in this version

+ type Authenticator interface

+ Authenticate func(repo string) ([]httputil.SendOption, error)

+ func NewAuthenticator(address string, config Config) (Authenticator, error)

type Config

+ EnableHTTPFallback bool

Aug 26, 2019 GO-2023-1505

  GO-2023-1505: Arbitrary file read vulnerability in github.com/uber/kraken

Apr 9, 2019 GO-2023-1505

  GO-2023-1505: Arbitrary file read vulnerability in github.com/uber/kraken

Mar 11, 2019 GO-2023-1505

  GO-2023-1505: Arbitrary file read vulnerability in github.com/uber/kraken

Feb 23, 2019 GO-2023-1505

  GO-2023-1505: Arbitrary file read vulnerability in github.com/uber/kraken

Changes in this version

+ func BasicAuthTransport(addr, repo string, tr http.RoundTripper, authConfig types.AuthConfig) (http.RoundTripper, error)

+ type Config struct

+ BasicAuth *types.AuthConfig

+ RemoteCredentialsStore string

+ TLS httputil.TLSConfig

+ func (c Config) GetHTTPOption(addr, repo string) (httputil.SendOption, error)