-
Spike
-
Resolution: Unresolved
-
Critical
-
None
-
s2i-1.4
-
None
-
False
-
None
-
False
-
-
Spike Story
Audit the use of golang x/crypto libraries in source-to-image. Some use is okay, some use is not. See x/crypto usage notes.
Acceptance Criteria
- Review s2i dependencies that reference the Golang x/crypto libraries
- Determine if any code paths import disallowed modules
- If a disallowed module is reachable, assess if its use can be blocked.