mirror of
https://github.com/fluxcd/flux2.git
synced 2026-02-08 16:57:29 +00:00
5ea4e814f5
This commit adds multiple safe guards for relative paths, ensuring they never traverse outside the working directory. The `SafeRelativePath` flag calculates the safe relative path based on a relative base dir, which results in a flattened path. The write methods of `manifestgen` make use of the `SecureJoin` as well, to ensure writes are never outside of the given directory when used as a lib outside of the CLI. Signed-off-by: Hidde Beydals <hello@hidde.co>
30 lines
1,002 B
Modula-2
30 lines
1,002 B
Modula-2
module github.com/fluxcd/flux2
|
|
|
|
go 1.15
|
|
|
|
require (
|
|
github.com/blang/semver/v4 v4.0.0
|
|
github.com/cyphar/filepath-securejoin v0.2.2
|
|
github.com/fluxcd/helm-controller/api v0.4.3
|
|
github.com/fluxcd/image-automation-controller/api v0.1.0
|
|
github.com/fluxcd/image-reflector-controller/api v0.1.0
|
|
github.com/fluxcd/kustomize-controller/api v0.5.0
|
|
github.com/fluxcd/notification-controller/api v0.5.0
|
|
github.com/fluxcd/pkg/apis/meta v0.5.0
|
|
github.com/fluxcd/pkg/git v0.1.0
|
|
github.com/fluxcd/pkg/runtime v0.4.0
|
|
github.com/fluxcd/pkg/ssh v0.0.5
|
|
github.com/fluxcd/pkg/untar v0.0.5
|
|
github.com/fluxcd/source-controller/api v0.5.4
|
|
github.com/google/go-containerregistry v0.2.0
|
|
github.com/manifoldco/promptui v0.7.0
|
|
github.com/olekukonko/tablewriter v0.0.4
|
|
github.com/spf13/cobra v1.0.0
|
|
k8s.io/api v0.19.4
|
|
k8s.io/apiextensions-apiserver v0.19.4
|
|
k8s.io/apimachinery v0.19.4
|
|
k8s.io/client-go v0.19.4
|
|
sigs.k8s.io/controller-runtime v0.6.4
|
|
sigs.k8s.io/kustomize/api v0.7.0
|
|
sigs.k8s.io/yaml v1.2.0
|
|
)
|