Affected by GO-2024-3269 and 3 other vulnerabilities

GO-2024-3269: Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer in github.com/cli/cli

GO-2024-3296: Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in github.com/cli/cli

GO-2024-3310: Downloading malicious GitHub Actions workflow artifact results in path traversal vulnerability in github.com/cli/cli

GO-2025-3467: `gh attestation verify` returns incorrect exit code during verification if no attestations are present in github.com/cli/cli

gitcredentials

package

v2.53.0 Latest Latest Go to latest Published: Jul 17, 2024 License: MIT Imports: 9 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type FakeHelperConfig struct {
	SelfExecutablePath string
	Helpers            map[string]Helper
}

func (hc *FakeHelperConfig) ConfigureOurs(hostname string) error

ConfigureOurs sets up the git credential helper chain to use the GitHub CLI credential helper for git repositories including gists.

func (hc *FakeHelperConfig) ConfiguredHelper(hostname string) (Helper, error)

ConfiguredHelper returns the configured git credential helper for a given hostname.

type Helper struct {
	Cmd string
}

A Helper represents a git credential helper configuration.

func (h Helper) IsConfigured() bool

IsConfigured returns true if the helper has a non-empty command, i.e. the git config had an entry

func (h Helper) IsOurs() bool

IsOurs returns true if the helper command is the GitHub CLI credential helper

type HelperConfig struct {
	SelfExecutablePath string
	GitClient          *git.Client
}

A HelperConfig is used to configure and inspect the state of git credential helpers.

func (hc *HelperConfig) ConfigureOurs(hostname string) error

ConfigureOurs sets up the git credential helper chain to use the GitHub CLI credential helper for git repositories including gists.

func (hc *HelperConfig) ConfiguredHelper(hostname string) (Helper, error)

ConfiguredHelper returns the configured git credential helper for a given hostname.

type Updater struct {
	GitClient *git.Client
}

An Updater is used to update the git credentials for a given hostname.

func (u *Updater) Update(hostname, username, password string) error

Update updates the git credentials for a given hostname, first by rejecting any existing credentials and then approving the new credentials.