afd02d3cfc
build: provenance and tampering checks for libgit2
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-13 10:10:42 +01:00
02f5b94baf
Update to golang-with-libgit2-all image
...
This dependency now releases two different images, one
containing the entire dependency chain for libgit2, and
another containing just the library itself. The latter
will be later used once Managed Transport is completely
removed from source controller.
As part of this update, the image now follows a new tag
format which is semver based and starts at 0.1.0.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-07-08 09:39:06 +01:00
77fcc88805
Update libgit2 to 1.3.1
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-04-14 09:59:01 +01:00
7d9aa8a772
align fuzzing deps
...
Signed-off-by: Ilan <ilan.pillemer@gmail.com>
2022-03-28 17:21:47 +01:00
8429708997
Upgrade libgit2 to libgit2-1.3.0-2
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-16 11:39:11 +00:00
db0f033409
Add support for multiple fuzz sanitizers
...
The oss-fuzz repository contains the configuration for fluxcd supported sanitizers.
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-15 16:57:38 +00:00
03c56e79a0
Download libgit2 libraries for fuzzing
...
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
2022-02-11 12:30:46 +00:00
d8da814d2e
Initial fuzzing tests
...
This PR refactors and supersedes: https://github.com/fluxcd/source-controller/pull/443
Signed-off-by: Paulo Gomes <paulo.gomes@weave.works>
Co-authored-by: Sanskar Jaiswal <sanskar.jaiswal@weave.works>
Co-authored-by: AdamKorcz <adam@adalogics.com>
2022-02-08 17:49:34 +00:00
Paulo Gomes