Affected by GO-2024-2965 and 1 other vulnerabilities

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/pomerium/pomerium

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
cmd
pomerium Package pomerium houses the main pomerium CLI command.	Package pomerium houses the main pomerium CLI command.
contextutil Package contextutil contains functions for working with contexts.	Package contextutil contains functions for working with contexts.
cryptutil Package cryptutil provides cryptographic utility functions, complementing the lower level abstractions found in the standard library.	Package cryptutil provides cryptographic utility functions, complementing the lower level abstractions found in the standard library.
encoding
base58 Package base58 provides an API for working with modified base58 and Base58Check encodings.	Package base58 provides an API for working with modified base58 and Base58Check encodings.
envoy Package envoy creates and configures an envoy server.	Package envoy creates and configures an envoy server.
files Package files contains files for use with envoy.	Package files contains files for use with envoy.
grpc Package grpc provides gRPC utility functions, complementing the more common ones in the github.com/grpc/grpc-go package	Package grpc provides gRPC utility functions, complementing the more common ones in the github.com/grpc/grpc-go package
audit
cli
config Package config contains protobuf definitions for config.	Package config contains protobuf definitions for config.
crypt Package crypt contains cryptographic protobuf messages.	Package crypt contains cryptographic protobuf messages.
databroker Package databroker contains databroker protobuf definitions.	Package databroker contains databroker protobuf definitions.
databroker/mock_databroker Package mock_databroker is a generated GoMock package.	Package mock_databroker is a generated GoMock package.
device Package device contains protobuf types for devices.	Package device contains protobuf types for devices.
directory Package directory contains protobuf types for directory users.	Package directory contains protobuf types for directory users.
events
identity Package identity contains protobuf types for identity management.	Package identity contains protobuf types for identity management.
registry
session Package session contains protobuf types for sessions.	Package session contains protobuf types for sessions.
user Package user contains protobuf types for users.	Package user contains protobuf types for users.
grpcutil Package grpcutil contains functions for interacting with gRPC.	Package grpcutil contains functions for interacting with gRPC.
logutil Package logutil contains functionality for working with logs.	Package logutil contains functionality for working with logs.
metrics Package metrics declares metrics names and labels that pomerium exposes as constants that could be referred to from other projects	Package metrics declares metrics names and labels that pomerium exposes as constants that could be referred to from other projects
netutil Package netutil contains various functions that help with networking.	Package netutil contains various functions that help with networking.
policy Package policy contains an implementation of the Pomerium Policy Language.	Package policy contains an implementation of the Pomerium Policy Language.
criteria Package criteria contains all the pre-defined criteria as well as a registry to add new criteria.	Package criteria contains all the pre-defined criteria as well as a registry to add new criteria.
generator Package generator converts Pomerium Policy Language into Rego.	Package generator converts Pomerium Policy Language into Rego.
parser Package parser contains a parser for Pomerium Policy Language.	Package parser contains a parser for Pomerium Policy Language.
rules Package rules contains useful pre-defined rego AST rules.	Package rules contains useful pre-defined rego AST rules.
protoutil Package protoutil contains functions for working with protobuf types.	Package protoutil contains functions for working with protobuf types.
storage Package storage provide generic interface to interact with storage backend.	Package storage provide generic interface to interact with storage backend.
inmemory Package inmemory contains an in-memory implementation of the databroker backend.	Package inmemory contains an in-memory implementation of the databroker backend.
postgres Package postgres contains an implementation of the storage.Backend backed by postgres.	Package postgres contains an implementation of the storage.Backend backed by postgres.
redis Package redis implements the storage.Backend interface for redis.	Package redis implements the storage.Backend interface for redis.
webauthnutil Package webauthnutil contains types and functions for working with the webauthn package.	Package webauthnutil contains types and functions for working with the webauthn package.