Uploaded image for project: 'OpenShift Builds'
  1. OpenShift Builds
  2. BUILD-1192

s2i: Audit use of golang x/crypto libraries

XMLWordPrintable

    • Icon: Spike Spike
    • Resolution: Unresolved
    • Icon: Critical Critical
    • None
    • s2i-1.4
    • source-to-image
    • None
    • False
    • None
    • False

      Spike Story

      Audit the use of golang x/crypto libraries in source-to-image. Some use is okay, some use is not. See x/crypto usage notes.

      Acceptance Criteria

      • Review s2i dependencies that reference the Golang x/crypto libraries
      • Determine if any code paths import disallowed modules
      • If a disallowed module is reachable, assess if its use can be blocked.

              Unassigned Unassigned
              adkaplan@redhat.com Adam Kaplan
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: