Affected by GO-2024-2998 and 1 other vulnerabilities

GO-2024-2998: Woodpecker's custom environment variables allow to alter execution flow of plugins in go.woodpecker-ci.org/woodpecker

GO-2024-2999: Woodpecker's custom workspace allow to overwrite plugin entrypoint executable in go.woodpecker-ci.org/woodpecker

permissions

package

v2.3.0 Latest Latest Go to latest Published: Jan 31, 2024 License: Apache-2.0 Imports: 2 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Admins struct {
	// contains filtered or unexported fields
}

func NewAdmins(admins []string) *Admins

func (a *Admins) IsAdmin(user *model.User) bool

type Orgs struct {
	IsConfigured bool
	// contains filtered or unexported fields
}

func NewOrgs(orgs []string) *Orgs

func (o *Orgs) IsMember(teams []*model.Team) bool

type OwnersAllowlist struct {
	// contains filtered or unexported fields
}

func NewOwnersAllowlist(owners []string) *OwnersAllowlist

func (o *OwnersAllowlist) IsAllowed(repo *model.Repo) bool