Affected by GO-2024-2582 and 4 other vulnerabilities

GO-2024-2582: Minder trusts client-provided mapping from repo name to upstream ID in github.com/stacklok/minder

GO-2024-2864: Denial of service of Minder Server with attacker-controlled REST endpoint in github.com/stacklok/minder

GO-2024-2871: Stacklok Minder vulnerable to denial of service from maliciously crafted templates in github.com/stacklok/minder

GO-2024-2885: Denial of service of Minder Server from maliciously crafted GitHub attestations in github.com/stacklok/minder

GO-2024-2934: Minder affected by denial of service from maliciously configured Git repository in github.com/stacklok/minder

alert

package

v0.0.34 Latest Latest Go to latest Published: Mar 5, 2024 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Package alert provides necessary interfaces and implementations for processing alerts.

View Source

const ActionType engif.ActionType = "alert"

ActionType is the type of the alert engine

This section is empty.

func NewRuleAlert(rt *pb.RuleType, pbuild *providers.ProviderBuilder) (engif.Action, error)

NewRuleAlert creates a new rule alert engine

This section is empty.

Path	Synopsis
noop Package noop provides a fallback alert engine for cases where no alert is set.	Package noop provides a fallback alert engine for cases where no alert is set.
security_advisory Package security_advisory provides necessary interfaces and implementations for creating alerts of type security advisory.	Package security_advisory provides necessary interfaces and implementations for creating alerts of type security advisory.