msb-public/helm - helm - 马士兵教育代码仓库

Author SHA1 Message Date

Author	SHA1	Message	Date
Adam Reese	2bf5c280d5	fix(): Validate metadata semver and printable characters ref: https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx Skip invalid chart versions when reading the repository index file or when programmatically adding a chart version. * Adds semver validation and strips non-printable characters and normalizes spaces for string fields in Metadata.Validate() * Fixes a unit test that was pulling a remote repo. Now uses a local repo. * Fixes ignored error in repo update command Signed-off-by: Adam Reese <adam@reese.io> (cherry picked from commit `657ce552cb`)	5 years ago
Matt Butcher	59d5b94d35	Merge pull request from GHSA-9vp5-m38w-j776	5 years ago
Zhou Hao	20c7909756	add unit test for metadata Validate Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>	6 years ago

Adam Reese

fix(*): Validate metadata semver and printable characters

ref: https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx

* Skip invalid chart versions when reading the repository index file or
  when programmatically adding a chart version.
* Adds semver validation and strips non-printable characters and
  normalizes spaces for string fields in Metadata.Validate()
* Fixes a unit test that was pulling a remote repo.  Now uses a local
  repo.
* Fixes ignored error in repo update command

Signed-off-by: Adam Reese <adam@reese.io>
(cherry picked from commit 657ce552cb)

Matt Butcher

59d5b94d35

Merge pull request from GHSA-9vp5-m38w-j776

Zhou Hao

20c7909756

add unit test for metadata Validate

Signed-off-by: Zhou Hao <zhouhao@cn.fujitsu.com>

3 Commits (c409cf1e987cf5d786ebfbcc3bfaa1d56cdf1c95)