github.com/openshift-pipelines/pipelines-as-code
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header | github.com/openshift-pipelines/pipelines-as-codeOpenShift Pipelines/openshift-pipelines/pipelines-operator-proxy-rhel8 | GoRed Hat | High | Fix reported | |
| Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution | github.com/openshift-pipelines/pipelines-as-code | Go | Medium | Fix reported |