Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[WIP]: enhance security with safe-path #23

Draft
wants to merge 4 commits into
base: main
Choose a base branch
from
Draft

[WIP]: enhance security with safe-path #23

wants to merge 4 commits into from

Commits on Apr 21, 2022

  1. bundle: add more comments with quotation from the image spec 

    The OCI image spec has a section named `Conversion to OCI Runtime
Configuration`, which defines how to generate a default runtime
configuration from an image.

So add more comments to create_runtime_config() by quoting spec
definitions.

Signed-off-by: Jiang Liu <[email protected]>
    @jiangliu
    jiangliu committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    a98956e View commit details
    Browse the repository at this point in the history

  2. bundle: follow the image spec to handle annotations 

    Obey the precedence rule defined the OCI image spec when generating
annotations for runtime configuration.

Signed-off-by: Jiang Liu <[email protected]>
    @jiangliu
    jiangliu committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    30535e9 View commit details
    Browse the repository at this point in the history

  3. bundle: add support for missing annotations 

    There are three more annotations defined by the OCI image spec,
so add support for them.

Signed-off-by: Jiang Liu <[email protected]>
    @jiangliu
    jiangliu committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    89292d9 View commit details
    Browse the repository at this point in the history

Commits on Apr 22, 2022

  1. bundle: enhance security by using the safe-path crate 

    Use the safe-path crate to protect from possible path related attacks.

Signed-off-by: Jiang Liu <[email protected]>
    @jiangliu
    jiangliu committed Apr 22, 2022
    Configuration menu
    Copy the full SHA
    a9bf1f6 View commit details
    Browse the repository at this point in the history