Affected by GO-2022-0502 and 2 other vulnerabilities

GO-2022-0502: Weave GitOps leaked cluster credentials into logs on connection errors in github.com/weaveworks/weave-gitops

GO-2023-1377: GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops

GO-2023-1388: Gitops Run insecure communication in github.com/weaveworks/weave-gitops

weave-gitops

command module

v0.0.2 Latest Latest Go to latest Published: May 7, 2021 License: MPL-2.0 Imports: 1 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Weave GitOps core

There is no documentation for this package.

Path	Synopsis
cmd
wego
wego/add
wego/flux
wego/install
wego/version
pkg
cmdimpl
flux
fluxops
fluxops/fluxopsfakes Code generated by counterfeiter.	Code generated by counterfeiter.
gitproviders
status
utils
version
test
acceptance/test * * All common util functions and golbal constants will go here.	* * All common util functions and golbal constants will go here.