GO-2023-2388: eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations in knative.dev/eventing-github

eventing-github

module

v0.38.1 Latest Latest Go to latest Published: Oct 17, 2023 License: Apache-2.0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/knative-extensions/eventing-github

Links

Open Source Insights

README ¶

Knative Eventing GitHub Source


STATUS	Alpha
Sponsoring WG	Eventing

The Knative GitHub Source registers for events of the specified types on the specified GitHub organization or repository, and brings those events into Knative. The GitHubSource fires a new event for selected GitHub event types.

To learn more about Knative, please visit our Knative docs repository.

If you are interested in contributing, see CONTRIBUTING.md and DEVELOPMENT.md.

Directories ¶

Path	Synopsis
cmd
controller
mt_receive_adapter
receive_adapter
webhook
config Package config is a placeholder that allows us to pull in config files via go mod vendor.	Package config is a placeholder that allows us to pull in config files via go mod vendor.
core Package config is a placeholder that allows us to pull in config files via go mod vendor.	Package config is a placeholder that allows us to pull in config files via go mod vendor.
mt-github Package config is a placeholder that allows us to pull in config files via go mod vendor.	Package config is a placeholder that allows us to pull in config files via go mod vendor.
github
pkg
adapter
apis Package apis contains Kubernetes API groups.	Package apis contains Kubernetes API groups.
apis/bindings
apis/bindings/v1alpha1 Package v1alpha1 contains API Schema definitions for the sources v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=bindings.knative.dev	Package v1alpha1 contains API Schema definitions for the sources v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=bindings.knative.dev
apis/sources Package sources contains sources API versions	Package sources contains sources API versions
apis/sources/v1alpha1 Package v1alpha1 contains API Schema definitions for the sources v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=sources.knative.dev	Package v1alpha1 contains API Schema definitions for the sources v1alpha1 API group +k8s:openapi-gen=true +k8s:deepcopy-gen=package,register +k8s:defaulter-gen=TypeMeta +groupName=sources.knative.dev
client/clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
client/clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
client/clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
client/clientset/versioned/typed/bindings/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/bindings/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/clientset/versioned/typed/sources/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/sources/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/informers/externalversions
client/informers/externalversions/bindings
client/informers/externalversions/bindings/v1alpha1
client/informers/externalversions/internalinterfaces
client/informers/externalversions/sources
client/informers/externalversions/sources/v1alpha1
client/injection/client
client/injection/client/fake
client/injection/informers/bindings/v1alpha1/githubbinding
client/injection/informers/bindings/v1alpha1/githubbinding/fake
client/injection/informers/bindings/v1alpha1/githubbinding/filtered
client/injection/informers/bindings/v1alpha1/githubbinding/filtered/fake
client/injection/informers/factory
client/injection/informers/factory/fake
client/injection/informers/factory/filtered
client/injection/informers/factory/filtered/fake
client/injection/informers/sources/factory
client/injection/informers/sources/factory/fake
client/injection/informers/sources/v1alpha1/githubsource
client/injection/informers/sources/v1alpha1/githubsource/fake
client/injection/informers/sources/v1alpha1/githubsource/filtered
client/injection/informers/sources/v1alpha1/githubsource/filtered/fake
client/injection/reconciler/sources/v1alpha1/githubsource
client/injection/reconciler/sources/v1alpha1/githubsource/stub
client/listers/bindings/v1alpha1
client/listers/sources/v1alpha1
common
mtadapter
mtadapter/router
reconciler/binding
reconciler/source Package source implements a GitHubSource controller.	Package source implements a GitHubSource controller.
reconciler/source/resources
test
lib
lib/resources

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL