-
Spike
-
Resolution: Done
-
Critical
-
s2i-1.4
-
None
-
1
-
False
-
-
False
-
Release Note Not Required
-
-
-
2
-
Builds Sprint #18, Builds Sprint #19
-
2
Spike Story
Audit the use of golang x/crypto libraries in source-to-image. Some use is okay, some use is not. See x/crypto usage notes.
Acceptance Criteria
- Review s2i dependencies that reference the Golang x/crypto libraries
- Determine if any code paths import disallowed modules
- If a disallowed module is reachable, assess if its use can be blocked.