Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(packages): Add Harbor CLI #16368

Merged
merged 1 commit into from Apr 5, 2024
Merged

feat(packages): Add Harbor CLI #16368

merged 1 commit into from Apr 5, 2024

Conversation

EyeCantCU
Copy link
Member

Pre-review Checklist

For new package PRs only

  • This PR is marked as fixing a pre-existing package request bug
    • Alternatively, the PR is marked as related to a pre-existing package request bug, such as a dependency
  • REQUIRED - The package is available under an OSI-approved or FSF-approved license
  • REQUIRED - The version of the package is still receiving security updates
  • This PR links to the upstream project's support policy (e.g. endoflife.date)

Copy link
Contributor

github-actions bot commented Apr 5, 2024

Package harbor-cli: Click to expand/collapse

Package harbor-cli:

.PKGINFO metadata:

# Generated by melange v0.6.10
pkgname = harbor-cli
pkgver = 0.0.1-r0
arch = x86_64
size = 9940212
origin = harbor-cli
pkgdesc = Official Harbor CLI
url = 
commit = 8b6cc5f718125f3ff7a7edae97e33501497b8bd5
license = Apache-2.0
depend = ca-certificates-bundle
provides = cmd:harbor=0.0.1-r0
datahash = a1b0957e2eb8e037e27a9e3f77113e7dffc68d8b27e33057170f6525273bf53b

Added: /.PKGINFO
Added: /usr/bin/harbor

bincapz found differences: Click to expand/collapse

Added: harbor-cli/usr/bin/harbor

Overall risk: 🔥 3/HIGH

RISK KEY DESCRIPTION
meta compiler go
meta lang c++
+3/HIGH techniques/code_eval evaluate code dynamically using eval: "eval $requestComp"
+2/MEDIUM archives/zip works with zip files
+2/MEDIUM evasion/content/length/0 sets HTTP content length to zero
+2/MEDIUM exec/program spawn a process
+2/MEDIUM exec/shell_echo uses the echo command to generate output
+2/MEDIUM fs/permission/chown changes file ownership
+2/MEDIUM fs/permission/modify modifies file permissions
+2/MEDIUM kernel/uname/get get system identification (uname)
+2/MEDIUM net/download downloads files
+2/MEDIUM net/http/cookies able to access HTTP resources using cookies
+2/MEDIUM net/http/post able to submit form content via HTTP POST
+2/MEDIUM net/ip/parse parses IP address (IPv4 or IPv6)
+2/MEDIUM net/mac/address retrieves network MAC address
+2/MEDIUM net/raw_sockets uses raw sockets
+2/MEDIUM net/url/encode encodes URL, likely to pass GET variables
+2/MEDIUM net/url/request requests resources via URL
+2/MEDIUM ref/path/etc/hosts references /etc/hosts: "/etc/hosts"
+2/MEDIUM ref/path/root references paths within /root:
/root/cmd.go
/root/login.go
/root/project.CreateProjectCommand.func1
/root/project.DeleteProjectCommand
/root/project.GetProjectCommand
/root/project.ListProjectCommand.func1
/root/project.createProjectOptions
/root/project.listProjectOptions
/root/project.runCreateProject
/root/project.runDeleteProject
/root/project.runGetProject
/root/project.runListProject
/root/project/create_project.go
/root/project/delete_project.go
/root/project/ls_project.go
/root/project/view_project.go
/root/registry.CreateRegistryCommand.func1
/root/registry.DeleteRegistryCommand
/root/registry.GetRegistryCommand
/root/registry.ListRegistryCommand.func1
/root/registry.UpdateRegistryCommand.ExactArgs.func2
/root/registry.UpdateRegistryCommand.func1
/root/registry._type
/root/registry.accessKey
/root/registry.accessSecret
/root/registry.createRegistrytOptions
/root/registry.listRegistryOptions
/root/registry.runCreateRegistry
/root/registry.runDeleteRegistry
/root/registry.runGetRegistry
/root/registry.runListRegistry
/root/registry.runUpdateRegistry
/root/registry.updateRegistrytOptions
/root/registry/create_registry.go
/root/registry/delete_registry.go
/root/registry/ls_registry.go
/root/registry/update_registry.go
/root/registry/view_registry.go
+2/MEDIUM ref/path/usr/local references paths within /usr/local:
/usr/local/share/applicationsalias
/usr/local/share/fontstag
/usr/local/share/mime/globs2mime
/usr/local/share/usr/share/fontsXDG_DOWNLOAD_DIRXDG_PICTURES_DIRunknown
+2/MEDIUM ref/words/agent references an 'agent': "agentkeep"
+2/MEDIUM ref/words/server_address references a 'server address', possible C2 client: "serverAddress"
+2/MEDIUM shell/ignore_output runs shell commands but throws output away
+1/LOW compression/gzip works with gzip files
+1/LOW crypto/aes supports AES (Advanced Encryption Standard)
+1/LOW crypto/ecdsa uses the Go crypto/ecdsa library
+1/LOW crypto/ed25519 elliptic curve algorithm used by TLS and SSH
+1/LOW crypto/tls tls
+1/LOW encoding/base64 supports base64 encoded strings
+1/LOW encoding/json supports JSON encoded objects
+1/LOW encoding/json/decode jsondecode
+1/LOW encoding/json/encode encodes JSON
+1/LOW fs/directory/list uses Go functions to list a directory
+1/LOW fs/directory/remove uses libc functions to remove directories
+1/LOW fs/file/delete deletes files
+1/LOW fs/file/read reads files
+1/LOW fs/link/read read value of a symbolic link
+1/LOW kernel/cpu/info gets number of processors
+1/LOW kernel/hostname/get gets the hostname of the machine
+1/LOW kernel/netlink communicate with kernel services
+1/LOW net/dns uses DNS (Domain Name Service)
+1/LOW net/dns/txt uses DNS TXT (text) records
+1/LOW net/hostname/resolve uses Go to resolve network hosts
+1/LOW net/http/accept/encoding able to decode multiple forms of HTTP responses (example: gzip)
+1/LOW net/http/auth makes HTTP requests with basic authentication
+1/LOW net/http/request makes HTTP requests
+1/LOW net/http2 uses the HTTP/2 protocol
+1/LOW net/http_proxy able to use an HTTP proxy that requires authentication
+1/LOW net/sendfile transfer data between file descriptors
+1/LOW net/socket/listen listen on a socket
+1/LOW net/socket/local/address get local address of connected socket
+1/LOW net/socket/peer/address get peer address of connected socket
+1/LOW net/socket/receive receive a message from a socket
+1/LOW net/socket/send send a message to a socket
+1/LOW net/udp/receive listens for UDP responses
+1/LOW net/udp/send sends UDP packets
+1/LOW net/url handles URL strings
+1/LOW ref/path/etc references paths within /etc:
/etc/apache/mime.typesgzip
/etc/bash
/etc/hostsgetsockoptnetlinkrib
/etc/httpd/conf/mime.typesmime
/etc/mime.types
/etc/nsswitch.confinvalid
/etc/pki/ca-trust/extracted/pem/tls-c
/etc/pki/tls/cacert.peminvalid
/etc/pki/tls/certs/ca-bundle.crtx
/etc/pki/tls/certsunable
/etc/protocolsunknown
/etc/resolv.confnon-
/etc/services
/etc/ssl/ca-bundle.pemx
/etc/ssl/cert.peminvalid
/etc/ssl/certs/ca-certificates.crtadd
/etc/ssl/certsprefix
/etc/zoneinfoparsing
+1/LOW ref/path/etc/resolv.conf accesses DNS resolver configuration: "/etc/resolv.conf"
+1/LOW ref/site/url contains embedded HTTPS URLs: "spf13/cobra#1279
spf13/cobra#1508"
+1/LOW ref/words/password references a password: "Password
password"
+1/LOW secrets/private_key private key

Signed-off-by: RJ Sampson <rj.sampson@chainguard.dev>
Copy link
Contributor

github-actions bot commented Apr 5, 2024

Package harbor-cli: Click to expand/collapse

Package harbor-cli:

.PKGINFO metadata:

# Generated by melange v0.6.10
pkgname = harbor-cli
pkgver = 0.0.1-r0
arch = x86_64
size = 9942964
origin = harbor-cli
pkgdesc = Official Harbor CLI
url = 
commit = 9cfdf039828069b6f0a6eb9f2428070b1c0e6e93
license = Apache-2.0
depend = ca-certificates-bundle
provides = cmd:harbor=0.0.1-r0
datahash = 014f29cdbcae8e0b49c7da74a966d7003d0333871ec95a59220b8a90ada8b4a3

Added: /.PKGINFO
Added: /usr/bin/harbor

bincapz found differences: Click to expand/collapse

Added: harbor-cli/usr/bin/harbor

Overall risk: 🔥 3/HIGH

RISK KEY DESCRIPTION
meta compiler go
meta lang c++
+3/HIGH techniques/code_eval evaluate code dynamically using eval: "eval $requestComp"
+2/MEDIUM archives/zip works with zip files
+2/MEDIUM evasion/content/length/0 sets HTTP content length to zero
+2/MEDIUM exec/program spawn a process
+2/MEDIUM exec/shell_echo uses the echo command to generate output
+2/MEDIUM fs/permission/chown changes file ownership
+2/MEDIUM fs/permission/modify modifies file permissions
+2/MEDIUM kernel/uname/get get system identification (uname)
+2/MEDIUM net/download downloads files
+2/MEDIUM net/http/cookies able to access HTTP resources using cookies
+2/MEDIUM net/http/post able to submit form content via HTTP POST
+2/MEDIUM net/ip/parse parses IP address (IPv4 or IPv6)
+2/MEDIUM net/mac/address retrieves network MAC address
+2/MEDIUM net/raw_sockets uses raw sockets
+2/MEDIUM net/url/encode encodes URL, likely to pass GET variables
+2/MEDIUM net/url/request requests resources via URL
+2/MEDIUM ref/path/etc/hosts references /etc/hosts: "/etc/hosts"
+2/MEDIUM ref/path/root references paths within /root:
/root/cmd.go
/root/login.go
/root/project.CreateProjectCommand.func1
/root/project.DeleteProjectCommand
/root/project.GetProjectCommand
/root/project.ListProjectCommand.func1
/root/project.createProjectOptions
/root/project.listProjectOptions
/root/project.runCreateProject
/root/project.runDeleteProject
/root/project.runGetProject
/root/project.runListProject
/root/project/create_project.go
/root/project/delete_project.go
/root/project/ls_project.go
/root/project/view_project.go
/root/registry.CreateRegistryCommand.func1
/root/registry.DeleteRegistryCommand
/root/registry.GetRegistryCommand
/root/registry.ListRegistryCommand.func1
/root/registry.UpdateRegistryCommand.ExactArgs.func2
/root/registry.UpdateRegistryCommand.func1
/root/registry._type
/root/registry.accessKey
/root/registry.accessSecret
/root/registry.createRegistrytOptions
/root/registry.listRegistryOptions
/root/registry.runCreateRegistry
/root/registry.runDeleteRegistry
/root/registry.runGetRegistry
/root/registry.runListRegistry
/root/registry.runUpdateRegistry
/root/registry.updateRegistrytOptions
/root/registry/create_registry.go
/root/registry/delete_registry.go
/root/registry/ls_registry.go
/root/registry/update_registry.go
/root/registry/view_registry.go
+2/MEDIUM ref/path/usr/local references paths within /usr/local:
/usr/local/share/applicationsalias
/usr/local/share/fontstag
/usr/local/share/mime/globs2mime
/usr/local/share/usr/share/fontsXDG_DOWNLOAD_DIRXDG_PICTURES_DIRunknown
+2/MEDIUM ref/words/agent references an 'agent': "agentkeep"
+2/MEDIUM ref/words/server_address references a 'server address', possible C2 client: "serverAddress"
+2/MEDIUM shell/ignore_output runs shell commands but throws output away
+1/LOW compression/gzip works with gzip files
+1/LOW crypto/aes supports AES (Advanced Encryption Standard)
+1/LOW crypto/ecdsa uses the Go crypto/ecdsa library
+1/LOW crypto/ed25519 elliptic curve algorithm used by TLS and SSH
+1/LOW crypto/tls tls
+1/LOW encoding/base64 supports base64 encoded strings
+1/LOW encoding/json supports JSON encoded objects
+1/LOW encoding/json/decode jsondecode
+1/LOW encoding/json/encode encodes JSON
+1/LOW fs/directory/list uses Go functions to list a directory
+1/LOW fs/directory/remove uses libc functions to remove directories
+1/LOW fs/file/delete deletes files
+1/LOW fs/file/read reads files
+1/LOW fs/link/read read value of a symbolic link
+1/LOW kernel/cpu/info gets number of processors
+1/LOW kernel/hostname/get gets the hostname of the machine
+1/LOW kernel/netlink communicate with kernel services
+1/LOW net/dns uses DNS (Domain Name Service)
+1/LOW net/dns/txt uses DNS TXT (text) records
+1/LOW net/hostname/resolve uses Go to resolve network hosts
+1/LOW net/http/accept/encoding able to decode multiple forms of HTTP responses (example: gzip)
+1/LOW net/http/auth makes HTTP requests with basic authentication
+1/LOW net/http/request makes HTTP requests
+1/LOW net/http2 uses the HTTP/2 protocol
+1/LOW net/http_proxy able to use an HTTP proxy that requires authentication
+1/LOW net/sendfile transfer data between file descriptors
+1/LOW net/socket/listen listen on a socket
+1/LOW net/socket/local/address get local address of connected socket
+1/LOW net/socket/peer/address get peer address of connected socket
+1/LOW net/socket/receive receive a message from a socket
+1/LOW net/socket/send send a message to a socket
+1/LOW net/udp/receive listens for UDP responses
+1/LOW net/udp/send sends UDP packets
+1/LOW net/url handles URL strings
+1/LOW ref/path/etc references paths within /etc:
/etc/apache/mime.typesgzip
/etc/bash
/etc/hostsgetsockoptnetlinkrib
/etc/httpd/conf/mime.typesmime
/etc/mime.types
/etc/nsswitch.confinvalid
/etc/pki/ca-trust/extracted/pem/tls-c
/etc/pki/tls/cacert.peminvalid
/etc/pki/tls/certs/ca-bundle.crtx
/etc/pki/tls/certsunable
/etc/protocolsunknown
/etc/resolv.confnon-
/etc/services
/etc/ssl/ca-bundle.pemx
/etc/ssl/cert.peminvalid
/etc/ssl/certs/ca-certificates.crtadd
/etc/ssl/certsprefix
/etc/zoneinfoparsing
+1/LOW ref/path/etc/resolv.conf accesses DNS resolver configuration: "/etc/resolv.conf"
+1/LOW ref/site/url contains embedded HTTPS URLs: "spf13/cobra#1279
spf13/cobra#1508"
+1/LOW ref/words/password references a password: "Password
password"
+1/LOW secrets/private_key private key

@imjasonh imjasonh merged commit a687f52 into main Apr 5, 2024
8 checks passed
@imjasonh imjasonh deleted the harbor-cli branch April 5, 2024 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants